scorecard/finding
Raghav Kaul bfaa9febc2
probe: releases with verified provenance (#4141)
* add projectpackageversions to signed releases raw results

Signed-off-by: Raghav Kaul <raghavkaul+github@google.com>

* finding: add NewNot* helpers, fix error msg

Signed-off-by: Raghav Kaul <raghavkaul+github@google.com>

* probe: releasesHaveVerifiedProvenance

Signed-off-by: Raghav Kaul <raghavkaul+github@google.com>

* logging

Signed-off-by: Raghav Kaul <raghavkaul+github@google.com>

* fix tests and lint

Signed-off-by: Raghav Kaul <raghavkaul+github@google.com>

* address comments

Signed-off-by: Raghav Kaul <raghavkaul+github@google.com>

* remove unused

Signed-off-by: Raghav Kaul <raghavkaul+github@google.com>

* fix merge conflict

Signed-off-by: Raghav Kaul <raghavkaul+github@google.com>

---------

Signed-off-by: Raghav Kaul <raghavkaul+github@google.com>
2024-06-07 10:15:20 -07:00
..
testdata ⚠️ Allow probes to specify their own bad outcomes (#4020) 2024-04-10 14:12:53 -07:00
finding_test.go ⚠️ Allow probes to specify their own bad outcomes (#4020) 2024-04-10 14:12:53 -07:00
finding.go probe: releases with verified provenance (#4141) 2024-06-07 10:15:20 -07:00
probe_test.go ⚠️ Allow probes to specify their own bad outcomes (#4020) 2024-04-10 14:12:53 -07:00
probe.go probe: releases with verified provenance (#4141) 2024-06-07 10:15:20 -07:00