Commit Graph

65 Commits

Author SHA1 Message Date
laurentsimon
3a43c683c8
Define scorecard GitHub action (#1069)
* test

* fix

* fix

* license
2021-09-27 22:30:36 +00:00
laurentsimon
6b9010e575
changes (#1062) 2021-09-27 15:50:58 +00:00
laurentsimon
fb77e42da2
Per-check score threshold for SARIF (#1057)
* fixes

* fix
2021-09-23 23:55:41 +00:00
laurentsimon
5d6a7cd20d
Add policy file (#1002)
* draft

* draft 2

* add tests

* check names

* fixes

* fix

* comments

* fix

* test

* remove risk

* license

* linter

* comments
2021-09-22 16:22:49 +00:00
laurentsimon
39bd00c359
Add aggregated score (#1046)
* ag scores

* fix

* CSV and string

* comments

* updates

* changes

* fixes
2021-09-21 22:30:25 +00:00
laurentsimon
617820706c
Update cron's JSON format (#1001)
* JSON2 for cron

* fixes

* linter

* fix
2021-09-13 21:55:06 +00:00
Azeem Shaikh
e730e911e6
sce.Create -> sce.WithMessage for wrapcheck (#995)
Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-09-10 15:50:33 +00:00
laurentsimon
870db56814
Cleanup documentation code (#981)
* draft 1

* unit tests

* fix

* fixes

* fix

* mod

* comments

* fixes

* rename

* fix

* linter
2021-09-09 22:09:39 +00:00
Azeem Shaikh
afe5b40567
Make RepoClient as default interface for Scorecard (#951)
Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-09-02 02:32:26 +00:00
laurentsimon
8f5e742e20
Improve JSON format (#934)
* support for verison

* fix

* fix

* linter

* typo

* fix
2021-09-01 17:29:40 +00:00
Azeem Shaikh
41d0ce38c4
Replace errors.As with Is (#901)
Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-08-25 01:03:45 +00:00
laurentsimon
276155d1eb
SARIF 4: Add support to output SARIF format (#866)
* draft1

* draft2

* draft

* draft 3

* typos

* unit tests

* fixes

* fixes

* related locs

* fixes

* version

* fixes

* linter/fix

* fixes

* linter

* gofmt -s
2021-08-23 21:31:33 +00:00
laurentsimon
23764f0168
Upload cron results to a table with new format (#830)
* add json2 function

* asJSON2

* url2

* draft

* root

* tables and bucket

* fix

* comments

* new transfer instances

* comments

* rename files

* update k8 names

* typo

* fizes

* linter
2021-08-16 16:38:41 +00:00
Azeem Shaikh
b7ddc9ac93
Update go-github version for consistency (#852)
Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-08-13 00:43:22 +00:00
laurentsimon
6718939a08
Cleanup errors and log (#782)
* cleanup

* text

* add errors

* fixes

* more

* fixes

* linnter

* comments

* name
2021-08-02 22:38:42 +00:00
Azeem Shaikh
6368c25f54
More linter issues (#794)
Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-08-01 03:42:14 +00:00
Azeem Shaikh
83e9f52501
Enable revive linters which are used in google3 (#793)
Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-07-31 22:31:34 +00:00
laurentsimon
577061b5e3
enable score results by default (#788)
* enable v2

* linnter
2021-07-30 15:21:09 +00:00
Naveen
4d7fb5d748
🌱 Fix the go.mod with v2 upgrade (#716)
The go.mod and the related files weren't t updated with the v2 upgrade.

https://github.com/ossf/scorecard/issues/711

This fix will address the issue.
2021-07-26 13:01:25 -05:00
Azeem Shaikh
7c133bc767
Create APIs for MergedPRs and DefaultBranch (#745)
Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-07-25 17:37:14 -07:00
laurentsimon
6f203e73b6
[migration to score] 4: active, fuzzing and code-review (#721)
* details-1

* nits

* typo

* commments

* dependabot and binary artifacts checks

* typo

* linter

* missing errors.go

* linter

* merge fix

* active, fuzzing and code review checks

* e2e tests for fuzzing

* fixes
2021-07-21 09:40:40 -07:00
laurentsimon
ab4bb60c9c
[migration to score] 1: create errors and new functions (#712)
* details-1

* comment

* doc

* nits

* typo

* commments

* nit

* linter
2021-07-20 11:36:35 -07:00
laurentsimon
45ea97e502
Add more github token names for env variable (#694)
* draft

* commit 1

* dead code

* comments

* merge fix

* typo
2021-07-19 18:56:42 +00:00
Anton
d08874e4c5
🐛 Updated checks arguments to be case insensitive (#685)
* Updated checks to be case insensitive

* Removed the need to have check indexes/keys lowercase

* Refactored to use strings.EqualFold()

* Refactored enabling checks into a separate function

* Refactored enableCheck() to return a bool
2021-07-14 09:26:33 -04:00
Anton Ritter-Gogerly
0967915691 Added error for invalid checks 2021-07-13 08:18:43 -05:00
Azeem Shaikh
7cf56e04af
Log error if GITHUB_AUTH_TOKEN is unset (#680)
Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-07-12 13:59:44 -07:00
Azeem Shaikh
d81fd24246
Add ListFiles and GetFileContent APIs (#637)
Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-06-30 23:49:49 -07:00
Azeem Shaikh
7861478e1a
Add error handling to RunScorecard fn (#595)
Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-06-20 23:31:10 -07:00
Azeem Shaikh
0b62c58704
Add v0 of RepoClient interface (#587)
Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-06-17 13:21:32 -07:00
Chris McGehee
524a187b31 Add new linter: errorlint 2021-05-30 13:12:42 -04:00
Chris McGehee
6b63f3f963
🌱 Fix lint issues: Replace golint with revive (#493)
* Fix lint issues: Replace golint with revive
golint is deprecated and recommended to be replaced with revive

* Updating comments to be more accurate

* Updating comments again

Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com>
2021-05-24 11:34:33 -07:00
Chris McGehee
61ecad3151
Add new linter: gci (#498) 2021-05-23 20:51:52 -07:00
Chris McGehee
50f7ed8519
🌱Fix lint issues: gochecknoinits linter (#485)
* Fix lint issues: gochecknoinits linter

* Fix lint issues: gochecknoinits linter
2021-05-22 13:19:52 -04:00
Azeem Shaikh
37519d9672
Update RunScorecards API. (#461)
Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-05-16 19:38:46 -07:00
Chris McGehee
82be54ba75
🌱 Fix lint issues: goerr113 linter (#398)
* Fix lint issues: goerr113 linter
This linter encourages wrapped static errors instead of dynamic errors.

* Updating capitalization
2021-05-06 15:32:27 -05:00
Chris McGehee
6a7142fe21 Fix lint issues: golint linter 2021-05-02 14:49:40 -05:00
Chris McGehee
526d9b5444 Fix lint issues: ineffassign linter 2021-05-02 11:45:40 -05:00
Azeem Shaikh
86a46560c8 Rename CheckResults to Checks to match BQ schema. 2021-04-26 17:45:04 -05:00
Azeem Shaikh
bd3eff1fcf
Cron job uses line-delimited JSON (#344)
*  Refactor to reduce code duplication

* 

* Move lib/ back to checker/

* Move lib/ back to checker/

* Move lib/ back to checker/

* Address PR comments.

* Addressing PR comments.

* Separate out ReposURL nito repos/

* Add TODO in gitcache module.

* Add RepoRequest/Response types.

* Avoid printing `ShouldRetry` and `Error` in output JSON.

* Fix JSON output.

* Simplify cmd package.

* Make cron/ a package instead of module.

* Fix TODO.

* Remove binary file.

* go.mod file.

* go.mod updates.

* Refactor cron to use in-memory JSON.

* Fix JSON output.

* Fix go.mod

* Address PR comments.

* Change %w -> %v.

* Address PR comments.

* Fix err.

Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-04-19 12:49:51 -07:00
Chris McGehee
06993b72ce
🐛 Fix linting issues (1 of n) (#348)
* Fix lint issues: whitespace linter

* Fix lint issues: wrapcheck linter

* Fix lint issues: errcheck linter

* Fix lint issues: paralleltest linter

* Fix lint issues: gocritic linter
Most changes from this commit are from passing checker.CheckResult by reference and not by value. gocritic identified that as a huge parameter.
gocritic also prefers regexp.MustCompile over Compile when the pattern is a const
2021-04-19 12:18:34 -07:00
Azeem Shaikh
a58818d258
🌱 : Reduce code duplication for follow-up cron refactoring (#338)
*  Refactor to reduce code duplication

* 

* Move lib/ back to checker/

* Move lib/ back to checker/

* Move lib/ back to checker/

* Address PR comments.

* Addressing PR comments.

* Avoid printing `ShouldRetry` and `Error` in output JSON.

* Fix JSON output.

Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-04-10 07:26:56 -05:00
Abhishek Arya
a44dd6a758
Add pypi and ruby gems package support. (#226)
Adds some more package managers to
https://github.com/ossf/scorecard/issues/33

Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
2021-03-01 11:21:20 -05:00
naveen
7726ca7987 Feature - Include metadata in the results
Included metadata that can be passed an argument to the command line.
The same metadata will returned the `json` results.
2021-02-22 19:23:46 -05:00
Nathan
554ca76bfe Fix - golangci issues gomnd, goconst
Fixed the golangci issues for gomnd and goconst.
Added ginkgo dependency in the makefile.
2021-02-17 18:22:18 -05:00
Naveen
c77e995ae5
Fix - output message for non default output (#167)
The json output had non-json output. Fixed it output only for default
output.
2021-02-12 18:13:54 -08:00
naveen
f385b0d9df Feature - run scans from npm pacakge name
Implemented scans from npm package name.
2021-02-02 16:07:41 -05:00
naveen
06f2616e7e fix - golangci-lint issues
Fixed the golangci-lint issues.
2020-12-22 16:20:10 -05:00
Abhishek Arya
09518b45b2 Add details field to --format=json 2020-11-23 19:00:57 -08:00
Dan Lorenc
71dace54e3 Fix date formatting. 2020-11-16 13:42:10 -06:00
dlorenc
62ae708944
Add a JSON format mode. (#65)
This is usable as is, but is also desigend to be easy to import into a database.
2020-11-12 12:47:08 -06:00