v1.0.0

What's Changed

• 🌱 Skeleton to setup scorecard.dev webapp by @azeemshaikh38 in #1
• 🐛 Fix Dockerfile by @azeemshaikh38 in #2
• ✨ Expose the Scorecard webapp on external IP by @azeemshaikh38 in #3
• Setup Scorecard GitHub Action by @azeemshaikh38 in #4
• Create codeql-analysis.yml by @naveensrinivasan in #5
• ✨ Add a Security policy by @azeemshaikh38 in #6
• Create dependabot.yml by @naveensrinivasan in #7
• 🌱 Bump ossf/scorecard-action from 0.0.1 to 0.0.2 by @dependabot in #8
• Update version in workflow comment by @laurentsimon in #10
• 🌱 Bump distroless/base from 46d4514 to 02f6671 by @dependabot in #9
• 🌱 Bump ossf/scorecard-action from 0.0.2 to 1.0.1 by @dependabot in #12
• ✨ Add Google-managed SSL cert by @azeemshaikh38 in #13
• 🌱 Bump ossf/scorecard-action from 1.0.1 to 1.0.2 by @dependabot in #15
• 🌱 Use GITHUB_TOKEN instead of PAT by @azeemshaikh38 in #17
• Fixing scorecard alerts by @abirismyname in #18
• Fixing Token-Permissions issue by @abirismyname in #19
• Fixing last remaining Token-Permissions issue by @abirismyname in #20
• 🌱 Update github/codeql-action requirement to d39d5d5c9707b926d517b1b292905ef4c03aa777 by @dependabot in #25
• 🌱 Bump ossf/scorecard-action from 1.0.2 to 1.0.3 by @dependabot in #16
• 🌱 Bump ossf/scorecard-action from 1.0.3 to 1.0.4 by @dependabot in #26
• 🌱 Bump actions/checkout from 2.4.0 to 3 by @dependabot in #29
• 🌱 Bump github/codeql-action from 1.1.2 to 1.1.3 by @dependabot in #27
• 🌱 Setup api.securityscorecards.dev by @azeemshaikh38 in #32
• 🌱 Bump actions/upload-artifact from 2.3.1 to 3 by @dependabot in #31
• 🌱 Bump github/codeql-action from 1.1.3 to 1.1.4 by @dependabot in #35
• Scorecard site frontend by @azeemshaikh38 in #45
• 🌱 Dependabot PRs reviewed by scorecard-maintainers by @azeemshaikh38 in #47
• fixed vulnerabilities by @mdunbavan in #48
• Bump nth-check from 1.0.2 to 2.0.1 in /scorecards-site by @dependabot in #49
• 🌱 Bump distroless/base from 02f6671 to 792dfe7 by @dependabot in #51
• 🌱 Bump github/codeql-action from 1.1.4 to 1.1.5 by @dependabot in #50
• 🌱 Bump distroless/base from 792dfe7 to 764b74b by @dependabot in #53
• 🌱 Bump github/codeql-action from 1.1.5 to 2.1.6 by @dependabot in #56
• Bump minimist from 1.2.5 to 1.2.6 in /scorecards-site by @dependabot in #57
• 🌱 Add staging and prod deployments to scorecard-site by @azeemshaikh38 in #59
• 🐛 Fix typo in CloudBuild config by @azeemshaikh38 in #60
• 🐛 Remove automatic_scaling since it's default by @azeemshaikh38 in #61
• 🌱 Bump github/codeql-action from 2.1.6 to 2.1.7 by @dependabot in #64
• 🐛 Fix UI/Content issues by @azeemshaikh38 in #67
• 🌱 Bump github/codeql-action from 2.1.7 to 2.1.8 by @dependabot in #68
• 🌱 Included dependency reviews check by @naveensrinivasan in #69
• GET Endpoint for Scorecard Results Retrieval by @rohankh532 in #55
• fix goat counter script load issue by @mdunbavan in #70
• Fixes/goatcounter issue by @mdunbavan in #72
• PR for issue #75 by @mdunbavan in #74
• bump fix for sidebar not loading by @mdunbavan in #76
• 🌱 Bump actions/checkout from 3.0.0 to 3.0.1 by @dependabot in #77
• Bump async from 2.6.3 to 2.6.4 in /scorecards-site by @dependabot in #78
• 🌱 Bump actions/checkout from 3.0.1 to 3.0.2 by @dependabot in #79
• POST Endpoint for Scorecard Results Verification & Upload by @rohankh532 in #54
• 🌱 Bump github.com/sigstore/cosign from 1.7.1 to 1.7.2 by @dependabot in #84
• 🌱 Bump github.com/sigstore/rekor from 0.5.0 to 0.6.0 by @dependabot in #82
• 🌱 Bump github.com/rhysd/actionlint from 1.6.11 to 1.6.12 by @dependabot in #83
• Fix Workflow Global Permissions Nil Check by @rohankh532 in #85
• 🌱 Bump actions/dependency-review-action from 3f943b86c9a289f4e632c632695e2e0898d9d67d to 1 by @dependabot in #91
• 🌱 Bump github.com/go-openapi/runtime from 0.23.3 to 0.24.1 by @dependabot in #89
• 🌱 Bump github/codeql-action from 2.1.8 to 2.1.10 by @dependabot in #90
• 🌱 Bump github.com/sigstore/cosign from 1.7.2 to 1.8.0 by @dependabot in #87
• Fixed codeql to include Javascript by @naveensrinivasan in #92
• 🌱 Bump github/codeql-action from 2.1.10 to 2.1.11 by @dependabot in #93
• 🌱 Bump github.com/rhysd/actionlint from 1.6.12 to 1.6.13 by @dependabot in #94
• 🌱 Bump distroless/base from 764b74b to d65ac1a by @dependabot in #95
• 🌱 Bump actions/upload-artifact from 3.0.0 to 3.1.0 by @dependabot in #96
• 🌱 Bump actions/dependency-review-action from 1.0.1 to 1.0.2 by @dependabot in #97
• 🌱 Code cleanup by @azeemshaikh38 in #102
• 🌱 Bump ossf/scorecard-action from 1.0.4 to 1.1.1 by @dependabot in #101
• 🌱 Bump github/codeql-action from 2.1.11 to 2.1.12 by @dependabot in #100
• 🌱 Add CI for linter, license and build by @azeemshaikh38 in #103
• 🌱 Fix linter issues by @azeemshaikh38 in #105
• 🌱 More cleanup by @azeemshaikh38 in #107
• 🌱 Remove k8s file and deploy through CloudRun by @azeemshaikh38 in #109
• 🌱 Update the POST API request by @azeemshaikh38 in #111
• 🐛 Fix code causing errors in web server by @azeemshaikh38 in #114
• 🐛 Fix scorecard-action e2e test breakages by @azeemshaikh38 in #119
• Included endorlabs as a contributor by @naveensrinivasan in #134
• 🌱 Replace Sigstore library calls with REST API by @azeemshaikh38 in #136
• sparkles feat: add verification for fulcio issued cert by @asraa in #138
• 🌱 Bump github.com/google/go-cmp from 0.5.7 to 0.5.8 by @dependabot in #115
• 🌱 Bump distroless/base from d65ac1a to e672eb7 by @dependabot in #117
• 🌱 Bump actions/dependency-review-action from 1.0.2 to 2.0.2 by @dependabot in #120
• 🌱 Bump ossf/scorecard-action from 1.1.1 to 1.1.2 by @dependabot in #129
• 🌱 Bump github/codeql-action from 2.1.12 to 2.1.16 by @dependabot in #139
• 🌱 Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 by @dependabot in #132
• ✨ Verify inclusion proof for returned Rekor entry by @azeemshaikh38 in #140
• 🌱 Bump actions/setup-go from 3.2.0 to 3.2.1 by @dependabot in #137
• 🌱 Bump github.com/rhysd/actionlint from 1.6.13 to 1.6.15 by @dependabot in #130
• 🐛 Fix bug in uuid lookup by @azeemshaikh38 in #141
• 🐛 Rekor returns wrong UUID that needs truncation by @azeemshaikh38 in #142
• 🌱 Bump actions/dependency-review-action from 2.0.2 to 2.0.4 by @dependabot in #143
• 🌱 Bump distroless/base from ad6969f to 49d2923 by @dependabot in #145
• 🌱 Bump github.com/go-openapi/strfmt from 0.21.2 to 0.21.3 by @dependabot in #144
• 🌱 Bump github.com/onsi/gomega from 1.19.0 to 1.20.0 by @dependabot in #146
• ✨ Enable Scorecard badge by @azeemshaikh38 in #149
• 🐛 Fix the job permission for Scorecard action by @azeemshaikh38 in #150
• 🌱 Bump github/codeql-action from 2.1.16 to 2.1.17 by @dependabot in #151
• ✨ Record and return per-commit results in API by @azeemshaikh38 in #152
• deploy dist folder to test by @mdunbavan in #154
• Included additional tests for validate workflow by @naveensrinivasan in #153
• 🌱 Bump github/codeql-action from 2.1.17 to 2.1.18 by @dependabot in #155
• create .toml file by @mdunbavan in #157
• 🌱 Meet the requirements for Netlify's OSS plan by @azeemshaikh38 in #160
• 🐛 Update netlify.toml by @azeemshaikh38 in #161
• README: Prefer non-generated name for Netlify site badge by @justaugustus in #162
• 🌱 Upgrade to go 1.18 by @naveensrinivasan in #159
• Bump parse-url from 6.0.0 to 6.0.5 in /scorecards-site by @dependabot in #164
• Bump terser from 4.8.0 to 4.8.1 in /scorecards-site by @dependabot in #147
• Bump got from 11.8.3 to 11.8.5 in /scorecards-site by @dependabot in #124
• 🌱 Unit tests for extract cert info by @naveensrinivasan in #158
• 🌱 Add Netlify badge to the site by @azeemshaikh38 in #165
• 🚿 Code cleanup by @azeemshaikh38 in #166
• Updated the endor logo by @naveensrinivasan in #167
• ✨ Use OpenAPI/Swagger for API boilerplate by @azeemshaikh38 in #168
• 🐛 Fix wrong URL by @azeemshaikh38 in #169
• 🌱 Bump actions/dependency-review-action from 2.0.4 to 2.1.0 by @dependabot in #176
• 📖 Add documentation by @azeemshaikh38 in #179
• 🌱 Update scorecard-action to v2:alpha by @azeemshaikh38 in #178
• 🌱 Bump github.com/go-openapi/swag from 0.21.1 to 0.22.3 by @dependabot in #177
• 🌱 Bump github.com/go-openapi/spec from 0.20.6 to 0.20.7 by @dependabot in #175
• 🌱 Bump github.com/go-openapi/loads from 0.21.1 to 0.21.2 by @dependabot in #174
• 🌱 Bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 by @dependabot in #181
• 🌱 Bump github.com/go-openapi/errors from 0.20.2 to 0.20.3 by @dependabot in #171
• 🌱 Bump github/codeql-action from 2.1.18 to 2.1.19 by @dependabot in #180
• 🐛 Fix bug in static page rendering by @azeemshaikh38 in #182
• ✨ Setup Cloud Endpoints by @azeemshaikh38 in #186
• 🌱 Bump github/codeql-action from 2.1.19 to 2.1.21 by @dependabot in #187
• 🌱 Bump actions/setup-go from 3.2.1 to 3.3.0 by @dependabot in #185
• 🌱 Update the site title by @azeemshaikh38 in #191
• Fix - Go version by @naveensrinivasan in #195
• 🌱 Fuzzing some funcs by @naveensrinivasan in #194
• 🌱 Bump github.com/onsi/gomega from 1.20.0 to 1.20.2 by @dependabot in #193

New Contributors

• @naveensrinivasan made their first contribution in #5
• @dependabot made their first contribution in #8
• @laurentsimon made their first contribution in #10
• @abirismyname made their first contribution in #18
• @rohankh532 made their first contribution in #55
• @asraa made their first contribution in #138
• @justaugustus made their first contribution in #162

Full Changelog: https://github.com/ossf/scorecard-webapp/commits/v1.0.0