Skip to content

Actions: agentrust-io/cmcp

Actions

OpenSSF Scorecard

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
scorecard.yml
245 workflow runs
245 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
OpenSSF Scorecard OpenSSF Scorecard #245: Scheduled
50s main
main
50s
fix(otel): wire R8 telemetry export into the running gateway (#465) OpenSSF Scorecard #244: Commit 747ff38 pushed by imran-siddique
30s main
main
30s
fix: refuse to issue trace claim when hardware TEE session report is … OpenSSF Scorecard #243: Commit d90d8fa pushed by imran-siddique
45s main
main
45s
refactor(tee): consume the shared SNP report layout from agent-manife… OpenSSF Scorecard #242: Commit addbde9 pushed by imran-siddique
38s main
main
38s
refactor(tee): consume the shared TPM parsers from agent-manifest 0.8… OpenSSF Scorecard #241: Commit c839920 pushed by imran-siddique
45s main
main
45s
chore(ci): pin agentrust-io/.github checkout to an immutable SHA (#463) OpenSSF Scorecard #240: Commit a0d75fa pushed by imran-siddique
45s main
main
45s
fix(tee): make TPM2_NV_Certify actually work, found on hardware (#460… OpenSSF Scorecard #239: Commit 3c2c483 pushed by imran-siddique
37s main
main
37s
feat(tee): certify the gateway measurement so it is signed evidence (… OpenSSF Scorecard #238: Commit 528e718 pushed by imran-siddique
39s main
main
39s
docs(spec): apply the section 5, 7 and 8 updates that were lost from … OpenSSF Scorecard #237: Commit 1bd3dc0 pushed by imran-siddique
35s main
main
35s
docs(status): make the TPM row agree with the hardware-validation rec… OpenSSF Scorecard #236: Commit 76b3cf1 pushed by imran-siddique
43s main
main
43s
docs(tee): record the NV extend hardware run, and correct the Azure P… OpenSSF Scorecard #235: Commit e5d919b pushed by imran-siddique
41s main
main
41s
feat(tee): measure the gateway into a TPM NV extend index (#432) (#451) OpenSSF Scorecard #234: Commit d5644d8 pushed by imran-siddique
38s main
main
38s
fix(tee): return an empty chain instead of raising on unparseable AK … OpenSSF Scorecard #233: Commit 9ae074b pushed by imran-siddique
51s main
main
51s
feat(tee): quote with the platform attestation key and ship its certi… OpenSSF Scorecard #232: Commit 5174dfc pushed by imran-siddique
33s main
main
33s
feat(verify): delegate TPM signature and chain verification to agent-… OpenSSF Scorecard #231: Commit 6bd0ea0 pushed by imran-siddique
45s main
main
45s
docs(testing): record the Azure vTPM certificate chain and event log … OpenSSF Scorecard #230: Commit 1247ffa pushed by imran-siddique
41s main
main
41s
fix(tee): quote with a real attestation key and keep the signature (#… OpenSSF Scorecard #229: Commit dc47764 pushed by imran-siddique
31s main
main
31s
feat(verify): verify the TPM quote signature (#444) OpenSSF Scorecard #228: Commit efe9567 pushed by imran-siddique
41s main
main
41s
Merge pull request #442 from agentrust-io/aarm/r4-r8-conformance OpenSSF Scorecard #227: Commit 23c81e3 pushed by imran-siddique
33s main
main
33s
feat(verify): replay TCG event logs against reported PCR values (#443) OpenSSF Scorecard #226: Commit ceb2bcc pushed by imran-siddique
45s main
main
45s
fix(tee): stop labelling unsigned PCR reads as hardware-attested (#441) OpenSSF Scorecard #225: Commit 1d34ec3 pushed by imran-siddique
32s main
main
32s
docs(spec): make the TPM security model vendor-neutral (#440) OpenSSF Scorecard #224: Commit 1e9ac51 pushed by imran-siddique
40s main
main
40s
fix(tee): correct PCR hex parsing that corrupted the measurement (#437) OpenSSF Scorecard #223: Commit 4a6f8dc pushed by imran-siddique
31s main
main
31s
docs(spec): add the TPM security model for non-CC devices (#439) OpenSSF Scorecard #222: Commit 3d4c043 pushed by imran-siddique
32s main
main
32s
fix(ci): repoint CODEOWNERS at the directories that exist (#438) OpenSSF Scorecard #221: Commit 67380d7 pushed by imran-siddique
45s main
main
45s