Skip to content

Improve security scorecard#2452

Open
MarcusSorealheis wants to merge 16 commits into
TraceMachina:mainfrom
MarcusSorealheis:improve-ssf
Open

Improve security scorecard#2452
MarcusSorealheis wants to merge 16 commits into
TraceMachina:mainfrom
MarcusSorealheis:improve-ssf

Conversation

@MarcusSorealheis

@MarcusSorealheis MarcusSorealheis commented Jun 18, 2026

Copy link
Copy Markdown
Member

Description

add fuzzing, and some other best practices to improve our rating in the OpenSSF framework.

Fixes # (issue)

Type of change

Please delete options that aren't relevant.

  • Bug fix (non-breaking change which fixes an issue)

How Has This Been Tested?

invoking the tests, bazel test //...

Checklist

  • Updated documentation if needed
  • Tests added/amended
  • bazel test //... passes locally
  • PR is contained in a single commit, using git amend see some docs

This change is Reviewable

@vercel

vercel Bot commented Jun 18, 2026

Copy link
Copy Markdown

@MarcusSorealheis is attempting to deploy a commit to the native-link-web-assets Team on Vercel.

A member of the Team first needs to authorize it.

Comment thread .github/workflows/custom-image.yaml
Comment thread deployment-examples/rhel/Dockerfile.rhel8
@vercel

vercel Bot commented Jun 19, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
nativelink Ready Ready Preview, Comment Jun 20, 2026 1:40am
nativelink-aidm Ready Ready Preview, Comment Jun 20, 2026 1:40am

Request Review

Comment thread nativelink-store/Cargo.toml Outdated
futures = { version = "0.3.31", default-features = false, features = ["std"] }
gcloud-auth = { version = "1.2", default-features = false, features = [
"jwt-rust-crypto",
"jwt-aws-lc-rs",

@corcillo corcillo Jun 20, 2026

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why this switch? I dont see any pros

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants