trickstercache / trickster

85%

main: 76%

LAST BUILD ON BRANCH security-insights

branch: security-insights

CHANGE BRANCH

x

Reset

Sync Branches

• security-insights
• 1.1-rename-org
• 2.0-otel-1.0
• 2.0-rename-org
• 2.0-shard-requests
• add-codeql
• add-notes
• add-sbom
• adopters
• alb/rc-mutex
• atomic
• buildflags
• cache-post-query
• cache-refactor
• cache-singleflight
• chunking
• chunking-2
• clickhouse-fix
• codespell
• compose-fs
• config-time-duration
• cosign
• custom-routes
• data-race/proxy-listener
• dataset-mutex
• dependabot
• dependabot/go_modules/github.com/andybalholm/brotli-1.1.0
• dependabot/go_modules/github.com/influxdata/influxdb-1.11.4
• dependabot/go_modules/github.com/klauspost/compress-1.17.7
• dependabot/go_modules/github.com/klauspost/compress-1.17.8
• dependabot/go_modules/github.com/prometheus/client_golang-1.18.0
• dependabot/go_modules/go.etcd.io/bbolt-1.3.7
• dependabot/go_modules/go.etcd.io/bbolt-1.3.9
• dependabot/go_modules/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace-0.39.0
• dependabot/go_modules/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace-0.40.0
• dependabot/go_modules/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace-0.41.0
• dependabot/go_modules/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace-0.52.0
• dependabot/go_modules/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace-0.53.0
• dependabot/go_modules/go.opentelemetry.io/otel-1.22.0
• dependabot/go_modules/go.opentelemetry.io/otel/exporters/jaeger-1.13.0
• dependabot/go_modules/go.opentelemetry.io/otel/exporters/jaeger-1.14.0
• dependabot/go_modules/go.opentelemetry.io/otel/exporters/stdout/stdouttrace-1.14.0
• dependabot/go_modules/go.opentelemetry.io/otel/exporters/stdout/stdouttrace-1.15.0
• dependabot/go_modules/go.opentelemetry.io/otel/exporters/stdout/stdouttrace-1.24.0
• dependabot/go_modules/go.opentelemetry.io/otel/exporters/stdout/stdouttrace-1.27.0
• dependabot/go_modules/go.opentelemetry.io/otel/exporters/stdout/stdouttrace-1.28.0
• dependabot/go_modules/go.opentelemetry.io/otel/exporters/zipkin-1.15.0
• dependabot/go_modules/go.opentelemetry.io/otel/exporters/zipkin-1.22.0
• dependabot/go_modules/go.opentelemetry.io/otel/exporters/zipkin-1.27.0
• dependabot/go_modules/go.opentelemetry.io/otel/exporters/zipkin-1.28.0
• dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.13.0
• dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.14.0
• dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.15.0
• dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.27.0
• dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.28.0
• dependabot/go_modules/go.opentelemetry.io/otel/trace-1.24.0
• dependabot/go_modules/go.opentelemetry.io/otel/trace-1.27.0
• dependabot/go_modules/go.opentelemetry.io/otel/trace-1.28.0
• dependabot/go_modules/golang.org/x/net-0.21.0
• dependabot/go_modules/golang.org/x/net-0.22.0
• dependabot/go_modules/golang.org/x/net-0.24.0
• dependabot/go_modules/google.golang.org/protobuf-1.33.0
• disco-2
• discovery
• discovery-dco-fix
• distroless
• elia-refactor-concurrency
• elia-refactor-listener
• enable-gosec
• engine-perf
• epoch-g115
• fix-677
• fix-codespell
• fix-deadlock
• fix-handler-order
• fix-injected-appversion
• fix-msgpack
• fix-multi-platform-publish
• fix-proxy-races
• fix-races
• fix-release
• fix-tags-nil-pointer
• fix-time
• flux
• flux-fixes
• g115-hops
• generic-extent-list
• header-env-string
• healthcheck-path-fix
• inject-app-version
• int-conversion-fix
• jr/2025-roadmap
• jr/add-check-license-headers
• jr/alb-tsm-series-hash
• jr/atomic-cert-swapper
• jr/authenticator
• jr/bugfix-hc
• jr/bump-packages
• jr/cache-selects
• jr/chunk-error
• jr/clickhouse-influxdb-updates
• jr/clickhouse-updates
• jr/diffable
• jr/diffpkg
• jr/docker-compose
• jr/docker-localhost-alias
• jr/docs-update
• jr/drop-irondb
• jr/extent-list-perf
• jr/fix-lint-issues-2
• jr/modern-ranges
• jr/more-durations
• jr/package-logger
• jr/path-configs-fix
• jr/prom-scalar
• jr/redis-update
• jr/refactor-alb
• jr/refactor-appends
• jr/registration-registry
• jr/rewriter-named-type
• jr/rule-panic
• jr/sets-refactor
• jr/startup-process
• jr/stringbuilder-fprintf
• jr/tsm-fixes
• jr/unvendor
• jr/update-deps
• jr/use-lookup-types
• jr/user-router
• jr/validation
• jwr/fix-lint-issues
• lm-router
• main
• make-serve
• minor-fixes
• misc
• more-stdlib
• more-stdlib-2
• non_ts_cache
• patch-1
• pcf-mutex
• perf-healthcheck
• perf-index
• perf-index-retry
• perf-loglevel
• perf-unmarshal-models
• print-startup-errors
• proxy-cache-mutex
• proxy-eng-extent
• publish-images
• reap-refactor
• reduce-wg-adds
• refactor-logging
• remove-duplicates
• remove-gorilla
• remove-mutex
• remove_by_name
• revendor
• rm-influx-errchan
• runtime
• set-refactor
• sha256sum
• simple-integration
• sql-parser-perf
• staticcheck
• strings-replacer
• tag-slice-usage
• test-fixes
• testcoverage
• tonychoe/oracle
• trickster-elia-renzoni
• update-2023-charter
• update-maintainers
• update-msgpack
• update-packages-gover
• update-pkgs
• use-reviewdog
• use-stdlib
• use-v2-module
• v1.1.x
• v1.1.x-alpine-latest
• vendor-updates

Build # 14344547757

Build Type

Pull #775

github

Committed by trumant

Commit Message

Add security-insights.yml to report security metadata

This PR adds a `security-insights.yml` file that conforms
to the schema in https://github.com/ossf/security-insights-spec/releases/download/v2.0.0/schema.cue

This file and its data are added to add Trickster to the list
of CNCF projects that have adopted the https://github.com/ossf/security-insights-spec?tab=readme-ov-file#security-insights-specification and is intended to help Trickster users easily discover and understand
the security characteristics of the project.

Signed-off-by: Travis Truman <trumant@gmail.com>

Pull Request Pull Request #775: Add security-insights.yml to report security metadata

Run Details

16445 of 19280 relevant lines covered (85.3%)

0.99 hits per line