Skip to content

fix(registry): require HTTPS reviewable sources for trust sourceStatus #2972

fix(registry): require HTTPS reviewable sources for trust sourceStatus

fix(registry): require HTTPS reviewable sources for trust sourceStatus #2972

Triggered via pull request July 30, 2026 16:07
Status Success
Total duration 24s
Artifacts 1

pipelock-security.yml

on: pull_request
pipelock-advisory-scan
20s
pipelock-advisory-scan
Fit to window
Zoom out
Zoom in

Annotations

1 error and 1 notice
pipelock-advisory-scan
Process completed with exit code 1.
pipelock-advisory-scan
cosign not found — add sigstore/cosign-installer to your workflow for supply chain verification

Artifacts

Produced during runtime
Name Size Digest
pipelock-audit-report
10.6 KB
sha256:bb3693c1dc3bfd53266e5897928b66e2c8b375efca49687f606c623b1aced2a0