scorecard/pkg
raghavkaul 4063fb6d49
🌱 Code Review: treat merging a PR as code review (#2413)
* Merges on Github count as a code review by the maintainer

Signed-off-by: Raghav Kaul <raghavkaul@google.com>

* Update Raw Results

* More detailed information for Changesets
* If there's no Revision ID, use the Commit SHA instead

Signed-off-by: Raghav Kaul <raghavkaul@google.com>

* Check that pull request had atleast one reviewer that wasn't its author

* Add field for Pull Request Merged-By to Github and Gitlab
* Note, this check can be bypassed if an author opens a PR with other
  people's commits

Signed-off-by: Raghav Kaul <raghavkaul@google.com>

Signed-off-by: Raghav Kaul <raghavkaul@google.com>
2022-11-08 11:09:02 -08:00
..
testdata Add custom remediation for workflow permissions/pinned dependencies (#1885) 2022-05-06 12:52:30 -07:00
common_test.go Use crane to add hash suggestion to unpinned Docker images (#2037) 2022-07-19 10:56:49 -07:00
common.go Use crane to add hash suggestion to unpinned Docker images (#2037) 2022-07-19 10:56:49 -07:00
dependencydiff_result.go Feature: Dependency-diff ecosystem naming convention mapping (GitHub -> OSV) (#2088) 2022-07-25 17:51:10 +00:00
json_raw_results.go 🌱 Code Review: treat merging a PR as code review (#2413) 2022-11-08 11:09:02 -08:00
json_test.go :warn: Remove the old Details field from CheckResult (#1906) 2022-05-12 12:58:12 -07:00
json.go Fix failing linters (#2281) 2022-09-21 18:14:58 +00:00
json.raw.schema Make Vuln ID field lower case in raw results (#1761) 2022-03-25 00:24:23 +00:00
json.v2.schema Add aggregated score (#1046) 2021-09-21 22:30:25 +00:00
mock_doc.go 🌱 Upgrade to go 1.18 (#2143) 2022-08-16 20:55:48 -05:00
sarif_test.go :warn: Remove the old Details field from CheckResult (#1906) 2022-05-12 12:58:12 -07:00
sarif.go 🌱 Upgrade to go 1.18 (#2143) 2022-08-16 20:55:48 -05:00
scorecard_result.go Update raw format for Dangerous workflows (#1865) 2022-05-13 19:10:57 -07:00
scorecard_test.go Return unknown commit SHA for local repos. (#2342) 2022-10-11 17:31:41 +00:00
scorecard.go Return unknown commit SHA for local repos. (#2342) 2022-10-11 17:31:41 +00:00