ossf/scorecard
1
1
Fork 0
mirror of https://github.com/ossf/scorecard.git synced 2024-11-05 05:17:00 +03:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity
423 Commits 37 Branches 42 Tags 439 MiB
70770e4501
Commit Graph

423 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
laurentsimon
70770e4501
✨ Feat/deps msg (#513) 
* ignore testdata/ files

* fix

* comments

* typo

* more specific messages
 2021-05-26 17:54:37 -07:00
dependabot[bot]
b7e1f155fc
🌱 Bump cloud.google.com/go/bigquery from 1.8.0 to 1.18.0 (#483) 
Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) from 1.8.0 to 1.18.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.8.0...spanner/v1.18.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-05-26 15:58:21 -04:00
dependabot[bot]
44252d64c8
🌱 Bump go.uber.org/zap from 1.16.0 to 1.17.0 (#509) 
Bumps [go.uber.org/zap](https://github.com/uber-go/zap) from 1.16.0 to 1.17.0.
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/uber-go/zap/compare/v1.16.0...v1.17.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-05-26 15:11:44 -04:00
dependabot[bot]
7ec85f22ed 🌱 Bump contrib.go.opencensus.io/exporter/stackdriver 
Bumps [contrib.go.opencensus.io/exporter/stackdriver](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver) from 0.13.4 to 0.13.6.
- [Release notes](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver/releases)
- [Commits](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver/compare/v0.13.4...v0.13.6)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-05-26 14:55:28 -04:00
dependabot[bot]
0d469a4533
🌱 Bump gocloud.dev from 0.22.0 to 0.23.0 (#464) 
Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0.
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-05-26 13:06:23 -04:00
dependabot[bot]
947a075c7c
🌱 Bump github/codeql-action (#482) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from cb5810848de15b695cd9ef3b559dd178c43c7df3 to 1.0.0. This release includes the previously tagged commit.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](cb5810848d...bc2cbe3983)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-05-26 16:10:12 +00:00
Azeem Shaikh
34fccb60b4
Bug fixes and additional logs for PubSub worker (#507) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-25 15:12:47 -07:00
Azeem Shaikh
638a5f80f8
Add options to Stackdriver exporter (#505) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-25 09:04:59 -07:00
Azeem Shaikh
400b815157
Off-by-one error in shardNum (#504) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-24 18:14:30 -07:00
Azeem Shaikh
72580f87f5
Fix bug in Dockerfile (#502) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-24 17:56:36 -07:00
Azeem Shaikh
de28c3c046
Cleanup PubSub deployment (#501) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-24 16:34:48 -07:00
Azeem Shaikh
437b6a879a
Limit number batched data points in Stackdriver (#500) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-24 14:37:27 -07:00
Azeem Shaikh
4d3c359fff
Add k8s file for PubSub jobs (#494) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-24 11:55:55 -07:00
Chris McGehee
6b63f3f963
🌱 Fix lint issues: Replace golint with revive (#493) 
* Fix lint issues: Replace golint with revive
golint is deprecated and recommended to be replaced with revive

* Updating comments to be more accurate

* Updating comments again

Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com>
 2021-05-24 11:34:33 -07:00
Chris McGehee
2d9a23b4bd
Add new linter: makezero (#497) 
I think this fixed a bug where pkg.RunScorecards was being run for empty repoURLs

Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com>
 2021-05-24 11:19:37 -07:00
Chris McGehee
a89eedc471
Fixing license typos (#496) 
Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com>
 2021-05-23 22:01:56 -07:00
Chris McGehee
61ecad3151
Add new linter: gci (#498) 2021-05-23 20:51:52 -07:00
Chris McGehee
587f41117b Fix lint issues: dupl linter 2021-05-23 11:49:33 -05:00
Chris McGehee
2e7a71fbf2
Fix lint issues: goerr113 linter (#491) 
Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com>
 2021-05-22 12:36:47 -07:00
Azeem Shaikh
0c636b0f5f
Fix bug in GitHub token access (#490) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-22 11:24:53 -07:00
Chris McGehee
26d17907a6
Fix lint issues: stylecheck linter (#487) 
Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-05-22 17:45:32 +00:00
Chris McGehee
35fece6491
Fix lint issues: lll linter (#486) 2021-05-22 17:29:18 +00:00
Chris McGehee
50f7ed8519
🌱Fix lint issues: gochecknoinits linter (#485) 
* Fix lint issues: gochecknoinits linter

* Fix lint issues: gochecknoinits linter
 2021-05-22 13:19:52 -04:00
Chris McGehee
f996065e40 Fix lint issues: gomnd linter 2021-05-22 01:09:09 -05:00
Azeem Shaikh
05ae13bc18
Fix bugs in stat collection logic (#489) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-21 22:04:04 -07:00
Azeem Shaikh
715a2eb718
Add HTTP stats (#484) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-21 13:10:27 -07:00
laurentsimon
eb0af441d1
✨ [Frozen-deps]: Ignore testdata/ files (#481) 
* ignore testdata/ files

* fix

* comments

* typo

* fix

* typo
 2021-05-21 08:45:55 -07:00
Azeem Shaikh
4584311fc6
Add monitoring to checks (#480) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-20 23:47:49 -07:00
laurentsimon
78933ac2f4 ignore scratch frm dockerfile imports 2021-05-20 13:23:27 -05:00
Azeem Shaikh
9453765aa0
Use TRUNCATE to load data into BigQuery (#476) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-19 23:59:40 -07:00
Chris McGehee
e75a9e19f9
Fix lint issues: govet linter (#478) 
Reordering fields reduces struct size in memory

Co-authored-by: Azeem Shaikh <azeemshaikh38@gmail.com>
 2021-05-19 23:38:58 -07:00
Chris McGehee
91b3641196
Fix lint issues: gocritic linter (#477) 2021-05-19 23:21:01 -07:00
Chris McGehee
8372067a70
🌱 Disabling failing linters (#474) 
* Disabling failing linters.
They will be re-enabled as all errors are fixed.
Also linter will now fail on any error, not just newly introduced.

* Explicitly specifying lint config file

Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-05-20 01:45:23 +00:00
Azeem Shaikh
09c44bd355
Embed data files into the go lib files (#475) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-20 01:00:44 +00:00
Azeem Shaikh
abdfd23770
Update Dockerfile dependencies for PubSub job. (#473) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-19 17:27:39 +00:00
laurentsimon
ee3f290702
✨ Add check for Docker dependency pinning by hash (#469) 
* check pinning in docker files

* Revert "check pinning in docker files"

This reverts commit c05a5007b1.

* check pinning in docker files

* Revert "check pinning in docker files"

This reverts commit c05a5007b1.

* check pinning in docker files

* Revert "check pinning in docker files"

This reverts commit c05a5007b1.

* check pinning in docker files

* Revert "check pinning in docker files"

This reverts commit c05a5007b1.

* check pinning in docker files

* Revert "check pinning in docker files"

This reverts commit c05a5007b1.

* check dependencies pinning in docker files

* check docker files hash pinning

* remove logging

* make keyword matches case-insensitive

* remove log

* update unit tests

* check fix

* check dependencies pinning in docker files

* check docker files hash pinning

* remove logging

* remove log

* check fix

* comment

* linter

* commments

* check pinning in docker files

* Revert "check pinning in docker files"

This reverts commit c05a5007b1.

* check pinning in docker files

* Revert "check pinning in docker files"

This reverts commit c05a5007b1.

* check pinning in docker files

* Revert "check pinning in docker files"

This reverts commit c05a5007b1.

* check dependencies pinning in docker files

* check docker files hash pinning

* check fix

* check dependencies pinning in docker files

* check docker files hash pinning

* remove logging

* make keyword matches case-insensitive

* remove log

* check fix

* comment

* commments

* comments

* check pinning in docker files

* Revert "check pinning in docker files"

This reverts commit c05a5007b1.

* check pinning in docker files

* Revert "check pinning in docker files"

This reverts commit c05a5007b1.

* check pinning in docker files

* Revert "check pinning in docker files"

This reverts commit c05a5007b1.

* check dependencies pinning in docker files

* check docker files hash pinning

* remove logging

* make keyword matches case-insensitive

* check fix

* check dependencies pinning in docker files

* check docker files hash pinning

* check fix

* commments

* comments

* comments

* comments

* update mod

* remove continue keyword

* linter

* linter

* linter

* comments

* cleanup

* linter

* typos

* typos
 2021-05-19 09:46:39 -07:00
Azeem Shaikh
b7e38b8e0c
Refactor roundtripper code (#471) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-19 06:34:20 +00:00
Azeem Shaikh
eb15a61f4d
Add Dockerfiles for PubSub batch job. (#472) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-18 19:44:38 -07:00
Azeem Shaikh
8c2432bd62
Add worker to the PubSub framework. (#463) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-18 15:18:08 -07:00
laurentsimon
3b1c9b8496
❇️ Pin our docker dependencies by hash (#468) 
* check pinning in docker files

* Pin our docker dependencies

* Revert "check pinning in docker files"

This reverts commit c05a5007b1.

* comments

* typo

* fix hashes
 2021-05-18 18:05:13 +00:00
dependabot[bot]
90e1aeb7ec
🌱 Bump actions/stale from 3.0.18 to 3.0.19 (#470) 
Bumps [actions/stale](https://github.com/actions/stale) from 3.0.18 to 3.0.19.
- [Release notes](https://github.com/actions/stale/releases)
- [Commits](3b3c3f03cd...98ed4cb500)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2021-05-18 10:47:18 -04:00
Abhishek Arya
5f82d2b9c0
✨ Add checks for workflow action pinning (#466) 
Patch by Laurent Simon <laurentsimon@google.com>

Co-authored-by: Laurent Simon <laurentsimon@google.com>
 2021-05-17 13:03:39 -07:00
Naveen
9281d1ddd9
🌱 Move tool dependencies into go.mod (#460) 
Moved the tool dependencies into go.mod
 2021-05-17 15:20:28 -04:00
Azeem Shaikh
37519d9672
Update RunScorecards API. (#461) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-16 19:38:46 -07:00
Naveen
f49aad68be
✨ Moved the cloudbuilds to yaml (#444) 
* Moved the cloudbuild configuration into YAML
 2021-05-17 01:36:46 +00:00
Azeem Shaikh
ba3b5c5979
Refactor Makefile and add proto compile support. (#458) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-15 13:58:01 -07:00
Naveen
f73f94bd0c
🌱 auto generate docs (#455) 
Implemented checks for auto generating docs.
 2021-05-15 13:32:27 +00:00
Azeem Shaikh
c82770397a
Add and use config.yaml for pubsub cron. (#457) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-15 00:22:45 -07:00
laurentsimon
e46016d244
📖 Add more detailed doc for checks (#453) 
* More detailed doc

* comment
 2021-05-14 17:05:59 -07:00
laurentsimon
6367cc44f6
pin scorecard workflow depepdencies by hash (#456) 2021-05-14 16:59:05 -07:00