ossf/scorecard
1
1
Fork 0
mirror of https://github.com/ossf/scorecard.git synced 2024-09-21 05:57:42 +03:00
Code Issues Actions 7 Packages Projects Releases Wiki Activity
617 Commits 35 Branches 42 Tags 436 MiB
e4f3ede843
Commit Graph

617 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Azeem Shaikh
96ea5577d1
Update documentation (#583) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-16 21:05:46 -07:00
Azeem Shaikh
bf4db8577b
Update how we record cached requests (#585) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-16 19:48:41 -07:00
Azeem Shaikh
92677860bc
Continous pprof for monitoring runtime profiles (#582) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-16 14:31:46 -07:00
asraa
ceef465b88
✨ add release branch protection check (#554) 
* check release branch protection

Signed-off-by: Asra Ali <asraa@google.com>

* add documentation

Signed-off-by: Asra Ali <asraa@google.com>

* add tests

Signed-off-by: Asra Ali <asraa@google.com>

* fix test parallelization

Signed-off-by: Asra Ali <asraa@google.com>

* lint

Signed-off-by: Asra Ali <asraa@google.com>

* comments

Signed-off-by: Asra Ali <asraa@google.com>

* update

Signed-off-by: Asra Ali <asraa@google.com>

* address comments add TODO

Signed-off-by: Asra Ali <asraa@google.com>

* fix

Signed-off-by: Asra Ali <asraa@google.com>
 2021-06-15 16:37:27 +00:00
Azeem Shaikh
6df8b67bcf
Add a BQ data transfer cron job (#570) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-14 16:25:32 -07:00
Azeem Shaikh
d9cc439cac
Use RollingUpdate strategy for cron worker job (#577) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-06-14 12:38:28 -07:00
asraa
b7ca0d9d1f
🐛 fix and result of multicheck (#571) 
* fix multicheckand

Signed-off-by: Asra Ali <asraa@google.com>

* address comments

Signed-off-by: Asra Ali <asraa@google.com>
 2021-06-14 18:00:54 +00:00
Azeem Shaikh
a5b53c693a
Add CPU profile to cron worker (#576) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-14 10:09:23 -07:00
Azeem Shaikh
77b8dbc2fb
Update cron job schedule. (#572) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-13 21:12:57 -07:00
Azeem Shaikh
1796af5175
Add projects to Cron job from criticality_score (#569) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-13 18:57:16 -07:00
Azeem Shaikh
c06f89af83
Script to add new projects to projects.csv file (#567) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-10 13:24:33 -07:00
naveen
e7ea1a2b88 🌱 Fixes the broken PR Verifier 
Reverted to the original permission.
 2021-06-10 12:31:21 -04:00
Azeem Shaikh
f9a72fa225
Register RepoRuntime View in PubSub worker. (#565) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-09 18:21:34 -07:00
Azeem Shaikh
88f645bb76
Add per-repo CPU stats (#562) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-09 14:18:40 -07:00
laurentsimon
8c87ab7647
add my test repo (#557) 2021-06-09 00:49:09 +00:00
Azeem Shaikh
95362cceba
Reduce cardinality of OpenCensus stats (#556) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-08 17:34:57 -07:00
Azeem Shaikh
09e86518e5
Add all Google-owned repositories to cron job (#555) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-08 16:55:43 -07:00
Azeem Shaikh
986127ccc7
Fix issues with PubSub worker (#553) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-07 11:44:15 -07:00
laurentsimon
2c9a05c721
✨ cleanup for token doc and code (#552) 
* cleanup

* comment
 2021-06-07 18:01:18 +00:00
naveen
28b1db9267 🌱 Fixes write permissions for ok-to-test 
Allowed write permissions to action for commenting on the status of the
PR.
 2021-06-07 12:49:11 -04:00
Naveen
ecc072c3b7
📖 Updated README with community content (#547) 
Included slack channel
Included bi-weekly meeting link
 2021-06-04 21:47:45 +00:00
laurentsimon
7fe41b2a8a
update frozen dep doc (#546) 2021-06-04 16:51:41 +00:00
naveen
d177fdaf57 📖 Fix the docs for Automatic checks for dependency 
Fixed the docs for automatic checks for dependency
 2021-06-04 11:22:46 -04:00
Chas. J. Owens IV
1ec9ada137
correct the path to a file (#543) 
correct path to the file that lists the projects checked each night

Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-06-04 15:08:30 +00:00
dependabot[bot]
15937a6fb7
🌱 Bump golang from 1.16.4 to 1.16.5 (#541) 
Bumps golang from 1.16.4 to 1.16.5.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-06-04 14:59:33 +00:00
Naveen
d00dd9c309
✨ Automatic dependency update checks (#322) 
* Checks if the dependencies are automatically updated.
 2021-06-04 14:35:06 +00:00
dependabot[bot]
a6d7c038af
🌱 Bump github.com/onsi/ginkgo from 1.16.2 to 1.16.4 (#537) 
Bumps [github.com/onsi/ginkgo](https://github.com/onsi/ginkgo) from 1.16.2 to 1.16.4.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v1.16.2...v1.16.4)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-06-03 23:02:05 -04:00
laurentsimon
d528b6e626
✨ Cleanup code for github tokens #534 (#539) 
* missed comments

* comments
 2021-06-04 00:12:56 +00:00
laurentsimon
37d979f79b
✨ check for read-only permissions of github token (#534) 
* check for read-only permissions of github token

* linter

* linter

* doc

* comments

* commments

* fix

* generate checks.mg

* update license

* linter

* comments

* license

* linter

* missing file

* linter

* license

* cleanup
 2021-06-03 16:30:37 -07:00
Azeem Shaikh
93a47e678d
Poll Pubsub worker until message is received (#536) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-03 10:58:37 -07:00
dependabot[bot]
b839e0426f 🌱 Bump cloud.google.com/go/pubsub from 1.10.3 to 1.11.0 
Bumps [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) from 1.10.3 to 1.11.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.10.3...pubsub/v1.11.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/pubsub
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-06-03 12:07:47 -04:00
Azeem Shaikh
dde16257d4
Remove CloudBuild trigger for daily cron job (#535) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-02 19:02:13 -07:00
Azeem Shaikh
3b86d57217
Use lease extension for PubSub worker (#533) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-02 17:59:42 -07:00
Azeem Shaikh
030bc90932
Remove daily cron job from codebase (#530) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-02 14:27:09 -07:00
Azeem Shaikh
b8770abe34
Use prod tokens for the PubSub cron (#528) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-01 17:32:32 -07:00
Azeem Shaikh
4ca4e31645
Add metric monitoring support to PubSub cron (#527) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-01 16:17:36 -07:00
Azeem Shaikh
7b4ee9bc9f
Factory for OpenCensus Exporter to use in tests (#526) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-06-01 15:53:49 -07:00
dependabot[bot]
b04df4e256 🌱 Bump goreleaser/goreleaser-action from 2.6.0 to 2.6.1 
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](70eb4e573c...ac067437f5)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-05-31 09:14:30 -04:00
laurentsimon
a402f73197
✨ Add cron github projects (#517) 
* 1) add more critical projects, 2) sort the entries, 3) add test remediation repo

* validate

* comments

Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-05-30 20:37:42 -04:00
Chris McGehee
524a187b31 Add new linter: errorlint 2021-05-30 13:12:42 -04:00
dependabot[bot]
934c741b8d
🌱 Bump golang from 6f0b0a3 to 8a106c4 (#519) 
Bumps golang from `6f0b0a3` to `8a106c4`.

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-05-28 12:11:23 -04:00
dependabot[bot]
c056718628
🌱 Bump github.com/onsi/gomega from 1.12.0 to 1.13.0 (#515) 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.12.0 to 1.13.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.12.0...v1.13.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-05-28 12:00:16 -04:00
Azeem Shaikh
be8aa3d713
Export registered check names (#518) 
Co-authored-by: Azeem Shaikh <azeems@google.com>
 2021-05-27 14:54:34 -07:00
dependabot[bot]
df44a898cf 🌱 Bump goreleaser/goreleaser-action from 2.5.0 to 2.6.0 
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](5e15885530...70eb4e573c)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-05-27 15:55:27 -04:00
laurentsimon
70770e4501
✨ Feat/deps msg (#513) 
* ignore testdata/ files

* fix

* comments

* typo

* more specific messages
 2021-05-26 17:54:37 -07:00
dependabot[bot]
b7e1f155fc
🌱 Bump cloud.google.com/go/bigquery from 1.8.0 to 1.18.0 (#483) 
Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) from 1.8.0 to 1.18.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.8.0...spanner/v1.18.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-05-26 15:58:21 -04:00
dependabot[bot]
44252d64c8
🌱 Bump go.uber.org/zap from 1.16.0 to 1.17.0 (#509) 
Bumps [go.uber.org/zap](https://github.com/uber-go/zap) from 1.16.0 to 1.17.0.
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/uber-go/zap/compare/v1.16.0...v1.17.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-05-26 15:11:44 -04:00
dependabot[bot]
7ec85f22ed 🌱 Bump contrib.go.opencensus.io/exporter/stackdriver 
Bumps [contrib.go.opencensus.io/exporter/stackdriver](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver) from 0.13.4 to 0.13.6.
- [Release notes](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver/releases)
- [Commits](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver/compare/v0.13.4...v0.13.6)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-05-26 14:55:28 -04:00
dependabot[bot]
0d469a4533
🌱 Bump gocloud.dev from 0.22.0 to 0.23.0 (#464) 
Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0.
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-05-26 13:06:23 -04:00
dependabot[bot]
947a075c7c
🌱 Bump github/codeql-action (#482) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from cb5810848de15b695cd9ef3b559dd178c43c7df3 to 1.0.0. This release includes the previously tagged commit.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](cb5810848d...bc2cbe3983)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Naveen <172697+naveensrinivasan@users.noreply.github.com>
 2021-05-26 16:10:12 +00:00