-
-
Notifications
You must be signed in to change notification settings - Fork 278
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
wip: add scorecard check #566
Conversation
Signed-off-by: Avelino <avelinorun@gmail.com>
Integration tests failure for bf74ff558523287576ab6bb2f6f772f2a5f64146 |
Signed-off-by: Avelino <avelinorun@gmail.com>
Integration tests failure for edfa2d18052e712a6320d79dd59d7df992944702 |
Signed-off-by: Avelino <avelinorun@gmail.com>
Signed-off-by: Avelino <avelinorun@gmail.com>
Signed-off-by: Avelino <avelinorun@gmail.com>
Integration tests failure for a8143d7f832dfad63d226fb7878343304a6e0c8f |
Signed-off-by: Avelino <avelinorun@gmail.com>
Integration tests failure for e596820e37e28057e31febc212c7317dac7ff133 |
Signed-off-by: Avelino <avelinorun@gmail.com>
Integration tests failure for 248d682200c04fc566d71d1211ae067edac3dd5d |
Signed-off-by: Avelino <avelinorun@gmail.com>
This PR has Quantification details
Why proper sizing of changes matters
Optimal pull request sizes drive a better predictable PR flow as they strike a
What can I do to optimize my changes
How to interpret the change counts in git diff output
Was this comment helpful? 👍 :ok_hand: :thumbsdown: (Email) |
Integration tests success for 2defbc79b83f36d3ba1f408c0fce346b788cb3c5 |
USE_BLOB_CACHE: true | ||
BLOB_URL: ${{secrets.BUCKET_URL}} | ||
run: | | ||
scorecard --repo=$REPO --show-details --metadata=openssf --format json > ./$OUTPUT_PATH/results.json |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I am one of the maintainers of scorecard. This will output the results.json and the code would have to validate the results of the json.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could you help us with this check so it makes sense to keep the scorecard in the pipeline (github action)
looking at the I'm going to close this PR and put the
|
fixed: #565