Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

✨ Support Binary-Artifacts check again for local repos #3415

Merged
merged 6 commits into from
Aug 23, 2023

Conversation

spencerschrock
Copy link
Member

What kind of change does this PR introduce?

feature

What is the current behavior?

  • local repos can't use the Binary-Artifacts check.

What is the new behavior (if this is a feature change)?**

Which issue(s) this PR fixes

Fixes #3258

Special notes for your reviewer

Does this PR introduce a user-facing change?

For user-facing changes, please add a concise, human-readable release note to
the release-note

(In particular, describe what changes users might need to make in their
application as a result of this pull request.)


Signed-off-by: Spencer Schrock <sschrock@google.com>
Signed-off-by: Spencer Schrock <sschrock@google.com>
Signed-off-by: Spencer Schrock <sschrock@google.com>
Signed-off-by: Spencer Schrock <sschrock@google.com>
checks/binary_artifact.go Show resolved Hide resolved
Signed-off-by: Spencer Schrock <sschrock@google.com>
@spencerschrock spencerschrock temporarily deployed to gitlab August 22, 2023 22:24 — with GitHub Actions Inactive
@spencerschrock spencerschrock temporarily deployed to integration-test August 22, 2023 22:24 — with GitHub Actions Inactive
@codecov
Copy link

codecov bot commented Aug 22, 2023

Codecov Report

Merging #3415 (67a0d5f) into main (475d975) will decrease coverage by 6.21%.
The diff coverage is 66.66%.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #3415      +/-   ##
==========================================
- Coverage   72.67%   66.46%   -6.21%     
==========================================
  Files         183      183              
  Lines       12932    12938       +6     
==========================================
- Hits         9398     8599     -799     
- Misses       3015     3855     +840     
+ Partials      519      484      -35     

@spencerschrock spencerschrock temporarily deployed to gitlab August 23, 2023 17:16 — with GitHub Actions Inactive
@spencerschrock spencerschrock temporarily deployed to integration-test August 23, 2023 17:16 — with GitHub Actions Inactive
@spencerschrock spencerschrock merged commit eba10df into ossf:main Aug 23, 2023
37 of 38 checks passed
@spencerschrock spencerschrock deleted the local/binary-artifact branch August 23, 2023 17:25
ashearin pushed a commit to kgangerlm/scorecard-gitlab that referenced this pull request Nov 13, 2023
* invert workflow check and explain early exit.

Signed-off-by: Spencer Schrock <sschrock@google.com>

* make workflow run validation optional.

Signed-off-by: Spencer Schrock <sschrock@google.com>

* mark binary artifacts as local file friendly.

Signed-off-by: Spencer Schrock <sschrock@google.com>

* add test for gradle wrapper without workflow run support

Signed-off-by: Spencer Schrock <sschrock@google.com>

* fix policy tests and make their names more clear.

Signed-off-by: Spencer Schrock <sschrock@google.com>

---------

Signed-off-by: Spencer Schrock <sschrock@google.com>
Signed-off-by: Allen Shearin <allen.p.shearin@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Issue: scorecard to detect Binary Artifacts from local directory in command line (terminal)
2 participants