Repository navigation

fix(ci): clear the fixable Scorecard findings and add frontend coverage to Codecov - #3005

Merged

vavallee merged 7 commits into

mainfrom

fix/ci-scorecard-and-coverage

Oct 5, 2026

Merged

fix(ci): clear the fixable Scorecard findings and add frontend coverage to Codecov#3005
vavallee merged 7 commits into
mainfrom
fix/ci-scorecard-and-coverage

Commits on Oct 5, 2026
- fix(ci): scope dev preview write permissions to the assemble job
  
  vavallee
  and
  claude
  committed
  f14563b
- fix(ci): install semgrep from a hash pinned requirements file
  
  vavallee
  and
  claude
  committed
  c9254dc
- fix(ci): attach the release provenance bundle as a release asset
  
  vavallee
  and
  claude
  committed
  bd28862
- fix(ci): record why GO-2026-5932 does not apply in osv-scanner.toml
  
  vavallee
  and
  claude
  committed
  7252785
- fix(ci): upload frontend coverage to Codecov under its own flag
  
  vavallee
  and
  claude
  committed
  321586d
- fix(ci): keep the attest step id off the action pin line
  
  vavallee
  and
  claude
  committed
  948d0e8
- fix(ci): keep coverage out of the tag gated test job
  
  vavallee
  and
  claude
  committed
  a61d496