-
Notifications
You must be signed in to change notification settings - Fork 474
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
✨ branch protection: requiring PRs gives partial credit #3499
✨ branch protection: requiring PRs gives partial credit #3499
Commits on Nov 13, 2023
-
feat(branch-protection): consider if project requires PRs prior to ma…
…ke changes As discussed at the issue ossf#2727, we're adding the "require PRs prior to make changes" as another requirement to tier 2. In addition to that, we're changing the weight of the tier 2 requirements so that "requiring 1 reviewer" has weight 2, while the other tier 2 requirements have weight 1 Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for e54013e - Browse repository at this point
Copy the full SHA e54013eView commit details -
test(branch-protection): increment and adapt testing
1. Adapt previous test cases to consider that now we'll have an aditional Info log telling that the project requires PRs to make changes. 2. Add more cases to test relevant use cases on the tier 2 level of branch protection Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 8e6ad1c - Browse repository at this point
Copy the full SHA 8e6ad1cView commit details -
docs(branch-protection-check): adapt check description to consider re…
…quirement of require PRs to make changes It adds the new tier 2 requirement, but also specify that the "require at least 1 reviewer" will have doubled weight. Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for dc7bbb6 - Browse repository at this point
Copy the full SHA dc7bbb6View commit details -
refactor(branch-protection-check): avoid duplicate funcions and enhan…
…ce readability Made some nice-to-have improvements on project readability, making it easier easier to understand how the branch-protection score is computed. Also unified 8 different functions that were doing basically the same thing. Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 968a4b9 - Browse repository at this point
Copy the full SHA 968a4b9View commit details -
📖 Update docs for Signed-Releases check (ossf#3469)
* Update docs for signed-releases Signed-off-by: Raghav Kaul <raghavkaul@google.com> * update docs Signed-off-by: Raghav Kaul <raghavkaul@google.com> --------- Signed-off-by: Raghav Kaul <raghavkaul@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for df13d85 - Browse repository at this point
Copy the full SHA df13d85View commit details -
🌱 Bump github.com/rhysd/actionlint from 1.6.15 to 1.6.26 (ossf#3489)
* bump actionlint. Signed-off-by: Spencer Schrock <sschrock@google.com> * fix unit tests. Signed-off-by: Spencer Schrock <sschrock@google.com> * include latest update. Signed-off-by: Spencer Schrock <sschrock@google.com> --------- Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 8e2ff42 - Browse repository at this point
Copy the full SHA 8e2ff42View commit details -
🌱 Bump github.com/onsi/gomega from 1.27.10 to 1.28.0 (ossf#3523)
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.27.10 to 1.28.0. - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.27.10...v1.28.0) --- updated-dependencies: - dependency-name: github.com/onsi/gomega dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for bab04bd - Browse repository at this point
Copy the full SHA bab04bdView commit details -
✨ Add --output argument to write results to file (ossf#3482)
* feat: Create output file argument Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * feat: Write results to output file Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * fix: Default results format output Print results headline to output, which may be a file. Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * feat: Log start and end of checks work to console Independent of the logs being output to console or a file, the information on which checks are running is still relevant. Now, we always log this info to the console. Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * test: Fix options unit tests Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * test: Output option content and shorthand Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * test: Output to file with correct format Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * test: Fix helper function with linter error Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * fix: Define output to console or file inside FormatResults Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * fix: Remove intermediate variable to define output Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * test: Fix error log Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * fix: Close output file before write results Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * test: Fix unit test Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * test: Fix remove file even if test fails Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * test: Fix fail test cases Fail test if cannot format results or cannot read real or expected outputs. Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * fix: Copyright notice year and license header spacing Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * fix: Rename Output to ResultsFile Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * fix: Linter errors Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * Revert "feat: Log start and end of checks work to console" This reverts commit c4a00a5. Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * fix: Print results headline in default format Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * test: Fix default format result test Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * fix: Close output only when it's file Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * fix: Linter error Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> --------- Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 1ba0c76 - Browse repository at this point
Copy the full SHA 1ba0c76View commit details -
🌱 Bump step-security/harden-runner from 2.5.1 to 2.6.0 (ossf#3532)
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.5.1 to 2.6.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@8ca2b8b...1b05615) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for ec15b2d - Browse repository at this point
Copy the full SHA ec15b2dView commit details -
🌱 Bump tj-actions/changed-files from 39.1.2 to 39.2.1 (ossf#3531)
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 39.1.2 to 39.2.1. - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](tj-actions/changed-files@4196030...db153ba) --- updated-dependencies: - dependency-name: tj-actions/changed-files dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 94f7039 - Browse repository at this point
Copy the full SHA 94f7039View commit details -
🌱 Fix race condition in output file test. (ossf#3533)
Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 66e5843 - Browse repository at this point
Copy the full SHA 66e5843View commit details -
📖 Fix documentation typos (ossf#3505)
* fix typo Signed-off-by: omahs <73983677+omahs@users.noreply.github.com> * fix typos Signed-off-by: omahs <73983677+omahs@users.noreply.github.com> * fix typo Signed-off-by: omahs <73983677+omahs@users.noreply.github.com> * fix typo Co-authored-by: Raghav Kaul <8695110+raghavkaul@users.noreply.github.com> Signed-off-by: omahs <73983677+omahs@users.noreply.github.com> * fix typos Signed-off-by: omahs <73983677+omahs@users.noreply.github.com> --------- Signed-off-by: omahs <73983677+omahs@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for d6275d3 - Browse repository at this point
Copy the full SHA d6275d3View commit details -
✨ broaden job matcher for semantic release (ossf#3506)
* feat: broaden job matcher for semantic release Signed-off-by: secustor <sebastian@poxhofer.at> * tests(checks/permissions): add tests for semantic release if using pnpm and yarn Signed-off-by: secustor <sebastian@poxhofer.at> --------- Signed-off-by: secustor <sebastian@poxhofer.at> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for d1bd8da - Browse repository at this point
Copy the full SHA d1bd8daView commit details -
🌱 Bump nick-invision/retry from 2.8.3 to 2.9.0 (ossf#3519)
Bumps [nick-invision/retry](https://github.com/nick-invision/retry) from 2.8.3 to 2.9.0. - [Release notes](https://github.com/nick-invision/retry/releases) - [Changelog](https://github.com/nick-fields/retry/blob/master/.releaserc.js) - [Commits](nick-fields/retry@943e742...1467290) --- updated-dependencies: - dependency-name: nick-invision/retry dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 1b016d2 - Browse repository at this point
Copy the full SHA 1b016d2View commit details -
🌱 Bump github.com/xanzy/go-gitlab from 0.92.1 to 0.92.3 (ossf#3528)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.92.1 to 0.92.3. - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](xanzy/go-gitlab@v0.92.1...v0.92.3) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for d393a00 - Browse repository at this point
Copy the full SHA d393a00View commit details -
🌱 Bump github.com/otiai10/copy from 1.12.0 to 1.14.0 (ossf#3527)
Bumps [github.com/otiai10/copy](https://github.com/otiai10/copy) from 1.12.0 to 1.14.0. - [Release notes](https://github.com/otiai10/copy/releases) - [Commits](otiai10/copy@v1.12.0...v1.14.0) --- updated-dependencies: - dependency-name: github.com/otiai10/copy dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 8844c48 - Browse repository at this point
Copy the full SHA 8844c48View commit details -
feat(branch-protection): standardize values received on evaluation
Previously, at the evaluation part of branch protetion, the values nil and false or zero were sort of interchangeble. This commit changes the code to set as nil only the data that could not be retrieved from github -- all the others would have values as false, zero, true, etc Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 27cc9d5 - Browse repository at this point
Copy the full SHA 27cc9d5View commit details -
test(github-client): adapt and add tests to check if nil values are c…
…oherent 1. Add new test to evaluate how we're interpreting a rule with all checkboxes unchecked (most shouldn't be nil) 2. Adapt existent tests to expect non-nil values for unchecked checkboxes Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 87487cb - Browse repository at this point
Copy the full SHA 87487cbView commit details -
feat(client-github): avoid reusing bool pointers
Changes some pieces of code to prefer using pointers of bool instantiated independently. If reusing bool pointers, at some piece of code the value of the bool could inadvertently changed and it would change the value of all other fields reusing that pointer. Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 0e48ea7 - Browse repository at this point
Copy the full SHA 0e48ea7View commit details -
feat(branch-protection): enhance evaluation if scorecard was run by a…
…dmin At the evaluation step we were using some non untrusted fieldds of the resposte to evaluate if Scorecard was run as admin or not. Now we're using a field provided directly from the client file. Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 1897c5a - Browse repository at this point
Copy the full SHA 1897c5aView commit details -
test(branch-protection): adapt testings to say if they have admin inf…
…o or not After last commit, the client will tell the evaluation files if Scorecard was run by administrator or not (i.e., if we have all the infos). This commit adapts the testings to also provide this info. Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for d9aa12a - Browse repository at this point
Copy the full SHA d9aa12aView commit details -
test(e2e-branch-protection): adapt number of logs after changes
- 2 warns (for 'last push approval' and 'codeowners review' disabled) were added because now those informations come as 'not-nil' at the evaluation part. - 1 info was added to say that PRs are required to make changes - 1 debug was removed because it said that we couldn't retrieve 'last push approval' information, but we actually can. It was just incorrectly set as nil Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for c675b57 - Browse repository at this point
Copy the full SHA c675b57View commit details -
Revert the 2 commits with changes around how Scorecard detects admin run
Configuration menu - View commit details
-
Copy full SHA for 2da9095 - Browse repository at this point
Copy the full SHA 2da9095View commit details -
refactor(branch-protection): change data structure to use pointer ins…
…tead of value At clients.BranchProtectionRule struct, changing RequiredPullRequestReviews to be a pointer instead of a struct value. This will allow the usage of the nil value of this structure to mean that we can't say if the repository requires reviews or not. Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for ab9510c - Browse repository at this point
Copy the full SHA ab9510cView commit details -
feat(branch-protection): use nil pointer on reviewers struct to mean
we don't know if they require PRs The nil value of the struct RequiredPullRequestReviews will now mean that we can't tell whether the project requires PRs to make changes or not. When we get this case, we're printing a debug informing that we don't have this data, but also printing a warn saying that they don't require reviews, because that will be true at this case. Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for c0c30df - Browse repository at this point
Copy the full SHA c0c30dfView commit details -
test(branch-protection): if we're setting the reviewers struct to nil
when needed Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 1370892 - Browse repository at this point
Copy the full SHA 1370892View commit details -
🌱 Bump github.com/google/osv-scanner from 1.4.0 to 1.4.1 (ossf#3536)
Bumps [github.com/google/osv-scanner](https://github.com/google/osv-scanner) from 1.4.0 to 1.4.1. - [Release notes](https://github.com/google/osv-scanner/releases) - [Changelog](https://github.com/google/osv-scanner/blob/main/CHANGELOG.md) - [Commits](google/osv-scanner@v1.4.0...v1.4.1) --- updated-dependencies: - dependency-name: github.com/google/osv-scanner dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for a70b6c4 - Browse repository at this point
Copy the full SHA a70b6c4View commit details -
🌱 Bump github.com/xanzy/go-gitlab from 0.92.3 to 0.93.0 (ossf#3537)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.92.3 to 0.93.0. - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](xanzy/go-gitlab@v0.92.3...v0.93.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 1754eee - Browse repository at this point
Copy the full SHA 1754eeeView commit details -
✨ scdiff: Limit generating results to specific checks (ossf#3535)
* accept checks arg when generating golden. Signed-off-by: Spencer Schrock <sschrock@google.com> * dont shadow import Signed-off-by: Spencer Schrock <sschrock@google.com> --------- Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for c74c23c - Browse repository at this point
Copy the full SHA c74c23cView commit details -
🌱 Add probe test utility (ossf#3541)
Signed-off-by: AdamKorcz <adam@adalogics.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 2a897cf - Browse repository at this point
Copy the full SHA 2a897cfView commit details -
🌱 Sort fields of raw results alphabetically (ossf#3540)
Signed-off-by: AdamKorcz <adam@adalogics.com> Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 24a9a34 - Browse repository at this point
Copy the full SHA 24a9a34View commit details -
🌱 Bump ossf/scorecard-action from 2.2.0 to 2.3.0 (ossf#3544)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.2.0 to 2.3.0. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@08b4669...483ef80) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 43a9a13 - Browse repository at this point
Copy the full SHA 43a9a13View commit details -
🌱 Bump golang.org/x/oauth2 from 0.12.0 to 0.13.0 (ossf#3545)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.12.0 to 0.13.0. - [Commits](golang/oauth2@v0.12.0...v0.13.0) --- updated-dependencies: - dependency-name: golang.org/x/oauth2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for e1efb32 - Browse repository at this point
Copy the full SHA e1efb32View commit details -
🌱 Bump github.com/xanzy/go-gitlab from 0.93.0 to 0.93.1 (ossf#3546)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.93.0 to 0.93.1. - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](xanzy/go-gitlab@v0.93.0...v0.93.1) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for b43fc8d - Browse repository at this point
Copy the full SHA b43fc8dView commit details -
🌱 Bump distroless/base from
27647a6
to29da700
and golang from `e……c457a2` to `e9ebfe9` (ossf#3548) * bump distroless. Signed-off-by: Spencer Schrock <sschrock@google.com> * bump golang 1.21 Signed-off-by: Spencer Schrock <sschrock@google.com> --------- Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 933b6fc - Browse repository at this point
Copy the full SHA 933b6fcView commit details -
🌱 Bump cloud.google.com/go/bigquery from 1.55.0 to 1.56.0 (ossf#3538)
Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) from 1.55.0 to 1.56.0. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@bigquery/v1.55.0...bigquery/v1.56.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/bigquery dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 0335794 - Browse repository at this point
Copy the full SHA 0335794View commit details -
🌱 Add OutcomeNotApplicable (ossf#3539)
Signed-off-by: AdamKorcz <adam@adalogics.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for dbbe7b8 - Browse repository at this point
Copy the full SHA dbbe7b8View commit details -
✨ Add additional fuzzing probes (ossf#3473)
* Extend with additional fuzzing probes Signed-off-by: David Korczynski <david@adalogics.com> * fix formatting Signed-off-by: David Korczynski <david@adalogics.com> * cleanup formatting Signed-off-by: David Korczynski <david@adalogics.com> * make skip testing optional Signed-off-by: David Korczynski <david@adalogics.com> * address reviews Signed-off-by: David Korczynski <david@adalogics.com> * add todo Signed-off-by: David Korczynski <david@adalogics.com> * nit Signed-off-by: David Korczynski <david@adalogics.com> * nit Signed-off-by: David Korczynski <david@adalogics.com> * add swift fuzzing probe Signed-off-by: David Korczynski <david@adalogics.com> * avoid changing OnMatchingFileContentDo Signed-off-by: David Korczynski <david@adalogics.com> * nit Signed-off-by: David Korczynski <david@adalogics.com> * undo matching file content extension Signed-off-by: David Korczynski <david@adalogics.com> * nit: fix constant Signed-off-by: David Korczynski <david@adalogics.com> * test all fileMatchPatterns per client Signed-off-by: David Korczynski <david@adalogics.com> * fix test logging counts Signed-off-by: David Korczynski <david@adalogics.com> * nit Signed-off-by: David Korczynski <david@adalogics.com> --------- Signed-off-by: David Korczynski <david@adalogics.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for b178a9b - Browse repository at this point
Copy the full SHA b178a9bView commit details -
📖 fix "default" typo (ossf#3543)
Signed-off-by: guoguangwu <guoguangwu@magic-shield.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 7197be9 - Browse repository at this point
Copy the full SHA 7197be9View commit details -
🌱 checks/raw: fix struct alignment linter issue (ossf#3550)
Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 7ecb2c1 - Browse repository at this point
Copy the full SHA 7ecb2c1View commit details -
🌱 Add map to Finding (ossf#3558)
Signed-off-by: AdamKorcz <adam@adalogics.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for ad9f04d - Browse repository at this point
Copy the full SHA ad9f04dView commit details -
🌱 Bump golang.org/x/net from 0.16.0 to 0.17.0 (ossf#3563)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.16.0 to 0.17.0. - [Commits](golang/net@v0.16.0...v0.17.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for cc7e9d2 - Browse repository at this point
Copy the full SHA cc7e9d2View commit details -
🌱 Bump golang.org/x/net from 0.14.0 to 0.17.0 in /tools (ossf#3562)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.14.0 to 0.17.0. - [Commits](golang/net@v0.14.0...v0.17.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 7b0ed65 - Browse repository at this point
Copy the full SHA 7b0ed65View commit details -
🌱 Adding all Intel public GitHub repos (ossf#3556)
Signed-off-by: Ryan Ware <ryan.ware@intel.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for acceee0 - Browse repository at this point
Copy the full SHA acceee0View commit details -
🌱 Bump github.com/onsi/ginkgo/v2 from 2.12.1 to 2.13.0 (ossf#3551)
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.12.1 to 2.13.0. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](onsi/ginkgo@v2.12.1...v2.13.0) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 1980139 - Browse repository at this point
Copy the full SHA 1980139View commit details -
🌱 Bump github.com/onsi/ginkgo/v2 in /tools (ossf#3552)
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.12.1 to 2.13.0. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](onsi/ginkgo@v2.12.1...v2.13.0) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 1d03eb3 - Browse repository at this point
Copy the full SHA 1d03eb3View commit details -
🌱 Bump github.com/google/go-cmp from 0.5.9 to 0.6.0 (ossf#3557)
Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.9 to 0.6.0. - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](google/go-cmp@v0.5.9...v0.6.0) --- updated-dependencies: - dependency-name: github.com/google/go-cmp dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for faa30eb - Browse repository at this point
Copy the full SHA faa30ebView commit details -
🌱 Bump kubernetes-sigs/kubebuilder-release-tools (ossf#3553)
Bumps [kubernetes-sigs/kubebuilder-release-tools](https://github.com/kubernetes-sigs/kubebuilder-release-tools) from 0.3.0 to 0.4.0. - [Release notes](https://github.com/kubernetes-sigs/kubebuilder-release-tools/releases) - [Changelog](https://github.com/kubernetes-sigs/kubebuilder-release-tools/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/kubebuilder-release-tools@4f3d108...d8367c2) --- updated-dependencies: - dependency-name: kubernetes-sigs/kubebuilder-release-tools dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 2d79a91 - Browse repository at this point
Copy the full SHA 2d79a91View commit details -
🐛 Fix wrong quotes (ossf#3565)
Signed-off-by: AdamKorcz <adam@adalogics.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for ab76574 - Browse repository at this point
Copy the full SHA ab76574View commit details -
🌱 Add new outcome to UnmarshalYAML (ossf#3566)
Signed-off-by: AdamKorcz <adam@adalogics.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 50f5231 - Browse repository at this point
Copy the full SHA 50f5231View commit details -
🐛 scdiff: fix generate cmd when no --checks arg provided. (ossf#3570)
Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for c537441 - Browse repository at this point
Copy the full SHA c537441View commit details -
✨ scdiff: improve
compare
usability (ossf#3573)* fallback to cron style when parsing dates. The cron output was never updated in ossf#2712. In the interim, support both formats. Signed-off-by: Spencer Schrock <sschrock@google.com> * continue on first diff, to highlight all differences. Signed-off-by: Spencer Schrock <sschrock@google.com> * tests for date fallback. Signed-off-by: Spencer Schrock <sschrock@google.com> --------- Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for aaed64b - Browse repository at this point
Copy the full SHA aaed64bView commit details -
✨ Add fast-check test runners integrations (ossf#3568)
Signed-off-by: Pierre Cavin <me@sherlox.io> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 36aa863 - Browse repository at this point
Copy the full SHA 36aa863View commit details -
🌱 Bump github.com/bradleyfalzon/ghinstallation/v2 (ossf#3575)
Bumps [github.com/bradleyfalzon/ghinstallation/v2](https://github.com/bradleyfalzon/ghinstallation) from 2.7.0 to 2.8.0. - [Release notes](https://github.com/bradleyfalzon/ghinstallation/releases) - [Commits](bradleyfalzon/ghinstallation@v2.7.0...v2.8.0) --- updated-dependencies: - dependency-name: github.com/bradleyfalzon/ghinstallation/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 7afb0bb - Browse repository at this point
Copy the full SHA 7afb0bbView commit details -
🌱 Bump tj-actions/changed-files from 39.2.1 to 39.2.3 (ossf#3577)
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 39.2.1 to 39.2.3. - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](tj-actions/changed-files@db153ba...95690f9) --- updated-dependencies: - dependency-name: tj-actions/changed-files dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 13e40b6 - Browse repository at this point
Copy the full SHA 13e40b6View commit details -
🌱 Bump github.com/google/ko from 0.14.1 to 0.15.0 in /tools (ossf#3578)
Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1 to 0.15.0. - [Release notes](https://github.com/google/ko/releases) - [Changelog](https://github.com/ko-build/ko/blob/main/.goreleaser.yml) - [Commits](ko-build/ko@v0.14.1...v0.15.0) --- updated-dependencies: - dependency-name: github.com/google/ko dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for a696ef5 - Browse repository at this point
Copy the full SHA a696ef5View commit details -
🌱 Bump actions/checkout from 4.1.0 to 4.1.1 (ossf#3580)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.0 to 4.1.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@8ade135...b4ffde6) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 3e9805e - Browse repository at this point
Copy the full SHA 3e9805eView commit details -
🐛 SAST detect new GitHub app slug for CodeQL (ossf#3591)
* Fix SAST no longer working for CodeQL The app slug for CodeQL appears to have changed from `github-advanced-security` to `github-code-scanning`, causing the SAST rule to false-negative on commits. Signed-off-by: martincostello <martin@martincostello.com> * Fix lint warning Fix lint warning. Signed-off-by: martincostello <martin@martincostello.com> --------- Signed-off-by: martincostello <martin@martincostello.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 7d4b425 - Browse repository at this point
Copy the full SHA 7d4b425View commit details -
🌱 enable the golangci-lint
bugs
preset (ossf#3583)* enable bugs preset Signed-off-by: Spencer Schrock <sschrock@google.com> * fix noctx linter Signed-off-by: Spencer Schrock <sschrock@google.com> * fix bodyclose linter Signed-off-by: Spencer Schrock <sschrock@google.com> * fix contextcheck linter Signed-off-by: Spencer Schrock <sschrock@google.com> * This ignores all existing cases of musttag linter complaints. This analyzer seems useful in the future, but some of this code is old and I don't want to change it for existing code now. Signed-off-by: Spencer Schrock <sschrock@google.com> * ignore existing nilerr lints. This behavior is from the initial commit, and primarily affects metrics. Leaving as is, and hope to benefit from the linter in the future. Signed-off-by: Spencer Schrock <sschrock@google.com> --------- Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 5a8f6d8 - Browse repository at this point
Copy the full SHA 5a8f6d8View commit details -
🌱 use forbidigo linter to prevent print statements (ossf#3585)
* enable forbidigo for print statements. include reasoning as message exposed to developer. Signed-off-by: Spencer Schrock <sschrock@google.com> * remove or grant exceptions for existing print statements Signed-off-by: Spencer Schrock <sschrock@google.com> * swap stdout to stderr Signed-off-by: Spencer Schrock <sschrock@google.com> * separate msg from regex for better readability. Signed-off-by: Spencer Schrock <sschrock@google.com> --------- Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 4bcc2ff - Browse repository at this point
Copy the full SHA 4bcc2ffView commit details -
🐛 scanning gitlab private repositories (ossf#3596)
* fix: Run for gitlab private repos Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * test: gitlab repo is accessible Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * fix: linter error Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> --------- Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> Co-authored-by: Raghav Kaul <8695110+raghavkaul@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for d904ca9 - Browse repository at this point
Copy the full SHA d904ca9View commit details -
🌱 Bump github.com/xanzy/go-gitlab from 0.93.1 to 0.93.2 (ossf#3593)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.93.1 to 0.93.2. - [Changelog](https://github.com/xanzy/go-gitlab/blob/main/releases_test.go) - [Commits](xanzy/go-gitlab@v0.93.1...v0.93.2) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 46302bb - Browse repository at this point
Copy the full SHA 46302bbView commit details -
🌱 Bump github.com/onsi/gomega from 1.28.0 to 1.28.1 (ossf#3597)
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.28.0 to 1.28.1. - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.28.0...v1.28.1) --- updated-dependencies: - dependency-name: github.com/onsi/gomega dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for fbf8a8f - Browse repository at this point
Copy the full SHA fbf8a8fView commit details -
🌱 add style linters: mirror, tenv, usestdlibvars (ossf#3586)
* fix tenv linter and bug with t.Parallel Signed-off-by: Spencer Schrock <sschrock@google.com> * fix usestdlibvars linter Signed-off-by: Spencer Schrock <sschrock@google.com> * fix mirror linter Signed-off-by: Spencer Schrock <sschrock@google.com> --------- Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 82510d4 - Browse repository at this point
Copy the full SHA 82510d4View commit details -
🌱 enable gomoddirectives linter. (ossf#3584)
Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 3ab16f7 - Browse repository at this point
Copy the full SHA 3ab16f7View commit details -
🌱 enable style linter
errname
(ossf#3587)* enable errname linter Signed-off-by: Spencer Schrock <sschrock@google.com> * convert publish err to custom error type. Signed-off-by: Spencer Schrock <sschrock@google.com> * remove unused exported error. Signed-off-by: Spencer Schrock <sschrock@google.com> * convert unsupported exporter type to custom error type. Signed-off-by: Spencer Schrock <sschrock@google.com> * exempt public errors from linter. Signed-off-by: Spencer Schrock <sschrock@google.com> * exempt cron config errors from linter. Signed-off-by: Spencer Schrock <sschrock@google.com> --------- Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for cf52e73 - Browse repository at this point
Copy the full SHA cf52e73View commit details -
Configuration menu - View commit details
-
Copy full SHA for 8a7a7e0 - Browse repository at this point
Copy the full SHA 8a7a7e0View commit details -
🌱 Bump github.com/golangci/golangci-lint in /tools (ossf#3592)
Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.54.2 to 1.55.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](golangci/golangci-lint@v1.54.2...v1.55.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for c4ed642 - Browse repository at this point
Copy the full SHA c4ed642View commit details -
🌱 GitLab: track coverage for gitlab e2e tests (ossf#3601)
Signed-off-by: Raghav Kaul <raghavkaul@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for c0518d1 - Browse repository at this point
Copy the full SHA c0518d1View commit details -
🌱 Add license probe (ossf#3465)
* 🌱 Add license probe Signed-off-by: AdamKorcz <adam@adalogics.com> * [WIP] add two remaining license checks as probes Signed-off-by: AdamKorcz <adam@adalogics.com> * fix nits Signed-off-by: AdamKorcz <adam@adalogics.com> * Use Errorf in test Signed-off-by: AdamKorcz <adam@adalogics.com> * use zrunner Signed-off-by: AdamKorcz <adam@adalogics.com> * fix wrong return value Signed-off-by: AdamKorcz <adam@adalogics.com> * fix linting issues and remove empty default Signed-off-by: AdamKorcz <adam@adalogics.com> * fix double if statement Signed-off-by: AdamKorcz <adam@adalogics.com> * Remove struct field from test Signed-off-by: AdamKorcz <adam@adalogics.com> * Add test for nil-case of license files slice Signed-off-by: AdamKorcz <adam@adalogics.com> * rewrite multiple def.ymls Signed-off-by: AdamKorcz <adam@adalogics.com> * fix nits Signed-off-by: AdamKorcz <adam@adalogics.com> * Add unit test with multiple unapproved license files Signed-off-by: AdamKorcz <adam@adalogics.com> * Add link to approved license formats Signed-off-by: AdamKorcz <adam@adalogics.com> * fix linting Signed-off-by: AdamKorcz <adam@adalogics.com> * remove comment Signed-off-by: AdamKorcz <adam@adalogics.com> * preserve logging from original check Signed-off-by: AdamKorcz <adam@adalogics.com> * fix typo Signed-off-by: AdamKorcz <adam@adalogics.com> * remove redundant map manipulation Signed-off-by: AdamKorcz <adam@adalogics.com> * rename hasApproveLicense probe Signed-off-by: AdamKorcz <adam@adalogics.com> * Return OutcomeNotApplicable if hasFSFOrOSIApprovedLicense probe does not find a license Signed-off-by: AdamKorcz <adam@adalogics.com> * Include license file locations in log Signed-off-by: AdamKorcz <adam@adalogics.com> * fix linting issues Signed-off-by: AdamKorcz <adam@adalogics.com> * replace strings filtering with OutcomeNotApplicable in hasLicenseFileAtTopDir probe Signed-off-by: AdamKorcz <adam@adalogics.com> * Fix linter issue Signed-off-by: AdamKorcz <adam@adalogics.com> * Include location of found license files Signed-off-by: AdamKorcz <adam@adalogics.com> --------- Signed-off-by: AdamKorcz <adam@adalogics.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 59654af - Browse repository at this point
Copy the full SHA 59654afView commit details -
🌱 convert packaging check to probe (ossf#3486)
* 🌱 convert packaging check to probe Signed-off-by: AdamKorcz <adam@adalogics.com> * amend text in def.yml Signed-off-by: AdamKorcz <adam@adalogics.com> * Correct short description in def.yml Signed-off-by: AdamKorcz <adam@adalogics.com> * log negative findings Signed-off-by: AdamKorcz <adam@adalogics.com> * rename probe Signed-off-by: AdamKorcz <adam@adalogics.com> * Fix the broken e2e test: The probe returned minimum score instead of inconclusive score which was not consistent with the previous scoring. This commit also removes the debug statements Signed-off-by: AdamKorcz <adam@adalogics.com> * change score text Signed-off-by: AdamKorcz <adam@adalogics.com> * include file details. process all packaging workflows Signed-off-by: AdamKorcz <adam@adalogics.com> --------- Signed-off-by: AdamKorcz <adam@adalogics.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 89589e9 - Browse repository at this point
Copy the full SHA 89589e9View commit details -
🌱 Add probe support for contributors metrics (ossf#3460)
* 🌱 Add probe support for contributors metrics Signed-off-by: AdamKorcz <adam@adalogics.com> * fix lint issues Signed-off-by: AdamKorcz <adam@adalogics.com> * change 'contributorsWith' to 'contributorsFrom' Signed-off-by: AdamKorcz <adam@adalogics.com> * change remediation difficulty Signed-off-by: AdamKorcz <adam@adalogics.com> * fix nits Signed-off-by: AdamKorcz <adam@adalogics.com> * Updates to checks and checks/evaluation Signed-off-by: AdamKorcz <adam@adalogics.com> * fix tests like in ossf#3409 Signed-off-by: AdamKorcz <adam@adalogics.com> * fix raw test Signed-off-by: AdamKorcz <adam@adalogics.com> * Update description in def.yml Signed-off-by: AdamKorcz <adam@adalogics.com> * move logic out of utils Signed-off-by: AdamKorcz <adam@adalogics.com> * add comment to consolidate unit test validation Signed-off-by: AdamKorcz <adam@adalogics.com> * change a couple of t.Fatal to t.Error Signed-off-by: AdamKorcz <adam@adalogics.com> * un-remove comment Signed-off-by: AdamKorcz <adam@adalogics.com> * remove map Signed-off-by: AdamKorcz <adam@adalogics.com> * fix typo Signed-off-by: AdamKorcz <adam@adalogics.com> * remove lint comment Signed-off-by: AdamKorcz <adam@adalogics.com> * fix incorrect -1/0 scoring Signed-off-by: AdamKorcz <adam@adalogics.com> * Do not specify 'Github' in def.yml Signed-off-by: AdamKorcz <adam@adalogics.com> * do not mention 'which companies' in def.yml Signed-off-by: AdamKorcz <adam@adalogics.com> * Rename tests Signed-off-by: AdamKorcz <adam@adalogics.com> * Use getRawResults and uncomment logging statement Signed-off-by: AdamKorcz <adam@adalogics.com> * Define return values of probe better Signed-off-by: AdamKorcz <adam@adalogics.com> * Use proportional score instead of min score Signed-off-by: AdamKorcz <adam@adalogics.com> * revert changed scoring Signed-off-by: AdamKorcz <adam@adalogics.com> * fix incorrect function name Signed-off-by: AdamKorcz <adam@adalogics.com> * remove utility function that finds non-positive outcomes Signed-off-by: AdamKorcz <adam@adalogics.com> * rebase with latest upstream main and fix linter issues Signed-off-by: AdamKorcz <adam@adalogics.com> * Log findings in one statements except a logging statements per finding Signed-off-by: AdamKorcz <adam@adalogics.com> * redefine conditional logic Signed-off-by: AdamKorcz <adam@adalogics.com> * rebase Signed-off-by: AdamKorcz <adam@adalogics.com> * remove unused function Signed-off-by: AdamKorcz <adam@adalogics.com> --------- Signed-off-by: AdamKorcz <adam@adalogics.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 3939cb7 - Browse repository at this point
Copy the full SHA 3939cb7View commit details -
🌱 Fix linter issues caught by new linters in golangci-lint v1.55.0 (o…
…ssf#3603) * fix protogetter issues Signed-off-by: Spencer Schrock <sschrock@google.com> * de-dupe property based fuzzer description Signed-off-by: Spencer Schrock <sschrock@google.com> --------- Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 364e826 - Browse repository at this point
Copy the full SHA 364e826View commit details -
remove sonatype lift (ossf#3605)
Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 162fe8f - Browse repository at this point
Copy the full SHA 162fe8fView commit details -
🌱 convert vulnerabilities check to probe (ossf#3487)
* 🌱 convert vulnerabilities check to probe Signed-off-by: AdamKorcz <adam@adalogics.com> * rename probe + nits Signed-off-by: AdamKorcz <adam@adalogics.com> * edit def.yml Signed-off-by: AdamKorcz <adam@adalogics.com> * Add vuln ID dynamically to def.yml Signed-off-by: AdamKorcz <adam@adalogics.com> * Elaborate the purpose of test data in unit test Signed-off-by: AdamKorcz <adam@adalogics.com> * Move logging out of loop and change logic of negativeFindings() Signed-off-by: AdamKorcz <adam@adalogics.com> * preserve number of vulns found in output Signed-off-by: AdamKorcz <adam@adalogics.com> * Preserve grouping of vulns Signed-off-by: AdamKorcz <adam@adalogics.com> * fix linter issues Signed-off-by: AdamKorcz <adam@adalogics.com> * Add remediation data Signed-off-by: AdamKorcz <adam@adalogics.com> * use checker.LogFindings() Signed-off-by: AdamKorcz <adam@adalogics.com> --------- Signed-off-by: AdamKorcz <adam@adalogics.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 1474447 - Browse repository at this point
Copy the full SHA 1474447View commit details -
✨ Add WithValues function to findings (ossf#3619)
* update Signed-off-by: laurentsimon <laurentsimon@google.com> * update comment Signed-off-by: laurentsimon <laurentsimon@google.com> * typo Signed-off-by: laurentsimon <laurentsimon@google.com> --------- Signed-off-by: laurentsimon <laurentsimon@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 64d4608 - Browse repository at this point
Copy the full SHA 64d4608View commit details -
CODEOWNERS: Support distribution of code reviews via team assignments (…
…ossf#3620) Individual maintainer assignments within CODEOWNERS mean that we cannot take advantage of GitHub code review distribution schemes for team review assignments. In this commit, we switch to team assignments within CODEOWNERS. A common complaint with this approach is that unless you are a part of the GitHub organization, you will not be able to view a team's membership/understand who the maintainers of a project are. To provide visibility into the maintainer list, we've added a MAINTAINERS.md here as well. Signed-off-by: Stephen Augustus <foo@auggie.dev> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for a8f758f - Browse repository at this point
Copy the full SHA a8f758fView commit details -
🌱 Enable golangci-lint
test
presets (ossf#3594)* enable test preset Leaves some opinionated linters disabled with reasons. Signed-off-by: Spencer Schrock <sschrock@google.com> * fix tparallel issues. Signed-off-by: Spencer Schrock <sschrock@google.com> --------- Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 269a1d4 - Browse repository at this point
Copy the full SHA 269a1d4View commit details -
🌱 Bump google.golang.org/grpc from 1.57.0 to 1.57.1 (ossf#3611)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.57.0 to 1.57.1. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.57.0...v1.57.1) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 074535f - Browse repository at this point
Copy the full SHA 074535fView commit details -
🌱 Bump google.golang.org/grpc from 1.58.2 to 1.58.3 in /tools (ossf#3612
) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.2 to 1.58.3. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.58.2...v1.58.3) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 07b38cb - Browse repository at this point
Copy the full SHA 07b38cbView commit details -
🌱 Bump ossf/scorecard-action from 2.3.0 to 2.3.1 (ossf#3599)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.0 to 2.3.1. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@483ef80...0864cf1) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 5ff9c3b - Browse repository at this point
Copy the full SHA 5ff9c3bView commit details -
🌱 Bump github.com/google/osv-scanner from 1.4.1 to 1.4.2 (ossf#3608)
Bumps [github.com/google/osv-scanner](https://github.com/google/osv-scanner) from 1.4.1 to 1.4.2. - [Release notes](https://github.com/google/osv-scanner/releases) - [Changelog](https://github.com/google/osv-scanner/blob/main/CHANGELOG.md) - [Commits](google/osv-scanner@v1.4.1...v1.4.2) --- updated-dependencies: - dependency-name: github.com/google/osv-scanner dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 01011b3 - Browse repository at this point
Copy the full SHA 01011b3View commit details -
🌱 Bump github.com/moby/buildkit from 0.12.2 to 0.12.3 (ossf#3589)
Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.12.2 to 0.12.3. - [Release notes](https://github.com/moby/buildkit/releases) - [Commits](moby/buildkit@v0.12.2...v0.12.3) --- updated-dependencies: - dependency-name: github.com/moby/buildkit dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 1fd212f - Browse repository at this point
Copy the full SHA 1fd212fView commit details -
🌱 Bump github.com/golangci/golangci-lint in /tools (ossf#3613)
Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.55.0 to 1.55.1. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](golangci/golangci-lint@v1.55.0...v1.55.1) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for b99b069 - Browse repository at this point
Copy the full SHA b99b069View commit details -
🌱 Update stale workflow to exempt Structured Results milestone (ossf#…
…3634) * 🌱 Update stale workflow to exempt Structured Results milestone * Removed duplicate line, updated stale-pr-message, and removed custom stale labels Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 7c620c7 - Browse repository at this point
Copy the full SHA 7c620c7View commit details -
🌱 Bump github.com/docker/docker (ossf#3627)
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 24.0.4+incompatible to 24.0.7+incompatible. - [Release notes](https://github.com/docker/docker/releases) - [Commits](moby/moby@v24.0.4...v24.0.7) --- updated-dependencies: - dependency-name: github.com/docker/docker dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for e43b139 - Browse repository at this point
Copy the full SHA e43b139View commit details -
🌱 Bump github.com/docker/docker in /tools (ossf#3628)
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 24.0.6+incompatible to 24.0.7+incompatible. - [Release notes](https://github.com/docker/docker/releases) - [Commits](moby/moby@v24.0.6...v24.0.7) --- updated-dependencies: - dependency-name: github.com/docker/docker dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for a6aae83 - Browse repository at this point
Copy the full SHA a6aae83View commit details -
🌱 Bump github.com/go-logr/logr from 1.2.4 to 1.3.0 (ossf#3622)
Bumps [github.com/go-logr/logr](https://github.com/go-logr/logr) from 1.2.4 to 1.3.0. - [Release notes](https://github.com/go-logr/logr/releases) - [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md) - [Commits](go-logr/logr@v1.2.4...v1.3.0) --- updated-dependencies: - dependency-name: github.com/go-logr/logr dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for adadc37 - Browse repository at this point
Copy the full SHA adadc37View commit details -
🌱 Bump github.com/go-git/go-git/v5 from 5.9.0 to 5.10.0 (ossf#3623)
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.9.0 to 5.10.0. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](go-git/go-git@v5.9.0...v5.10.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 0e3bbb6 - Browse repository at this point
Copy the full SHA 0e3bbb6View commit details -
🌱 Bump github.com/onsi/gomega from 1.28.1 to 1.29.0 (ossf#3624)
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.28.1 to 1.29.0. - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.28.1...v1.29.0) --- updated-dependencies: - dependency-name: github.com/onsi/gomega dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 0a8ef7b - Browse repository at this point
Copy the full SHA 0a8ef7bView commit details -
🌱 Bump cloud.google.com/go/bigquery from 1.56.0 to 1.57.1 (ossf#3638)
Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) from 1.56.0 to 1.57.1. - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@bigquery/v1.56.0...bigquery/v1.57.1) --- updated-dependencies: - dependency-name: cloud.google.com/go/bigquery dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for fef0fab - Browse repository at this point
Copy the full SHA fef0fabView commit details -
🐛 remove probe remediations from detail string (ossf#3642)
For now, this is just producing very long detail strings. Probably negatively affecting cron results Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 7eea83a - Browse repository at this point
Copy the full SHA 7eea83aView commit details -
🌱 Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (ossf#3644)
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.7.0 to 1.8.0. - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.7.0...v1.8.0) --- updated-dependencies: - dependency-name: github.com/spf13/cobra dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for e6a2d33 - Browse repository at this point
Copy the full SHA e6a2d33View commit details -
🌱 Convert Dangerous Workflow check to probes (ossf#3521)
* 🌱 Convert Dangerous Workflow check to probes Signed-off-by: AdamKorcz <adam@adalogics.com> * remove hasAnyWorkflows probe Signed-off-by: AdamKorcz <adam@adalogics.com> * combine two conditionals into one Signed-off-by: AdamKorcz <adam@adalogics.com> * preserve logging from original evaluation Signed-off-by: AdamKorcz <adam@adalogics.com> * rebase Signed-off-by: AdamKorcz <adam@adalogics.com> --------- Signed-off-by: AdamKorcz <adam@adalogics.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for b984da5 - Browse repository at this point
Copy the full SHA b984da5View commit details -
🌱 Convert SAST check to probes (ossf#3571)
* Convert SAST checks to probes Signed-off-by: AdamKorcz <adam@adalogics.com> * Update checks/evaluation/sast.go Co-authored-by: Raghav Kaul <8695110+raghavkaul@users.noreply.github.com> Signed-off-by: AdamKorcz <44787359+AdamKorcz@users.noreply.github.com> * preserve file info when logging positive Sonar findings Signed-off-by: AdamKorcz <adam@adalogics.com> * rebase Signed-off-by: AdamKorcz <adam@adalogics.com> * Remove warning logging Signed-off-by: AdamKorcz <adam@adalogics.com> * add outcome and message to finding on the same line Signed-off-by: AdamKorcz <adam@adalogics.com> * codeql workflow -> codeql action Signed-off-by: AdamKorcz <adam@adalogics.com> * 'the Sonar' -> 'Sonar' in probe def.yml Signed-off-by: AdamKorcz <adam@adalogics.com> * fix typo Signed-off-by: AdamKorcz <adam@adalogics.com> * Change how probe creates location Signed-off-by: AdamKorcz <adam@adalogics.com> * Change names of values Signed-off-by: AdamKorcz <adam@adalogics.com> * change 'SAST tool detected: xx' to 'SAST tool installed: xx' Signed-off-by: AdamKorcz <adam@adalogics.com> * make text in probe def.yml easier to read Signed-off-by: AdamKorcz <adam@adalogics.com> * Change 'to' to 'two' Signed-off-by: AdamKorcz <adam@adalogics.com> * Minor change Signed-off-by: AdamKorcz <adam@adalogics.com> --------- Signed-off-by: AdamKorcz <adam@adalogics.com> Signed-off-by: AdamKorcz <44787359+AdamKorcz@users.noreply.github.com> Co-authored-by: Raghav Kaul <8695110+raghavkaul@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 5f5c0ad - Browse repository at this point
Copy the full SHA 5f5c0adView commit details -
🌱 Bump github.com/google/osv-scanner from 1.4.2 to 1.4.3 (ossf#3639)
Bumps [github.com/google/osv-scanner](https://github.com/google/osv-scanner) from 1.4.2 to 1.4.3. - [Release notes](https://github.com/google/osv-scanner/releases) - [Changelog](https://github.com/google/osv-scanner/blob/main/CHANGELOG.md) - [Commits](google/osv-scanner@v1.4.2...v1.4.3) --- updated-dependencies: - dependency-name: github.com/google/osv-scanner dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 303aa5d - Browse repository at this point
Copy the full SHA 303aa5dView commit details -
🌱 Bump golang.org/x/text from 0.13.0 to 0.14.0 (ossf#3643)
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.13.0 to 0.14.0. - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.13.0...v0.14.0) --- updated-dependencies: - dependency-name: golang.org/x/text dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for c36e0b2 - Browse repository at this point
Copy the full SHA c36e0b2View commit details -
🌱 Bump github.com/golangci/golangci-lint in /tools (ossf#3645)
Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.55.1 to 1.55.2. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](golangci/golangci-lint@v1.55.1...v1.55.2) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for b74b9d1 - Browse repository at this point
Copy the full SHA b74b9d1View commit details -
🐛 Pinned-Dependencies continues on error (ossf#3515)
* Continue on error detecting OS Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Add tests for error detecting OS Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Add ElementError to identify elements that errored Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Add Incomplete field to PinningDependenciesData Will store all errors handled during analysis, which may lead to incomplete results. Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Register job steps that errored out Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Add tests that incomplete steps are caught Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Add warnings to details about incomplete steps Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Add tests that incomplete steps generate warnings Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Register shell files skipped due to parser errors Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Add tests showing when parser errors affect analysis Dockerfile pinning is not affected. Everything in a 'broken' Dockerfile RUN block is ignored Everything in a 'broken' shell script is ignored testdata/script-invalid.sh modified to demonstrate the above Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Incomplete results logged as Info, not Warn Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Remove `Type` from logging of incomplete results Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Update tests after rebase Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Add Unwrap for ElementError, improve its docs Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Add ElementError case to evaluation unit test Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Move ElementError to checker/raw_result checker/raw_result defines types used to describe analysis results. ElementError is meant to describe potential flaws in the analysis and is therefore a sort of analysis result itself. Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Use finding.Location for ElementError.Element Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Use an ElementError for script parser errors Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Replace .Incomplete []error with .ProcessingErrors []ElementError Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> * Adopt from reviewer comments - Replace ElementError's `Element *finding.Location` with `Location finding.Location` - Rename ErrorJobOSParsing to ErrJobOSParsing to satisfy linter - Fix unit test Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> --------- Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 2ad51d6 - Browse repository at this point
Copy the full SHA 2ad51d6View commit details -
🌱 Bump actions/dependency-review-action from 3.1.0 to 3.1.2 (ossf#3653)
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 3.1.0 to 3.1.2. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](actions/dependency-review-action@6c5ccda...fde92ac) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 3ef09c5 - Browse repository at this point
Copy the full SHA 3ef09c5View commit details -
🌱 Bump kubernetes-sigs/kubebuilder-release-tools (ossf#3637)
Bumps [kubernetes-sigs/kubebuilder-release-tools](https://github.com/kubernetes-sigs/kubebuilder-release-tools) from 0.4.0 to 0.4.2. - [Release notes](https://github.com/kubernetes-sigs/kubebuilder-release-tools/releases) - [Changelog](https://github.com/kubernetes-sigs/kubebuilder-release-tools/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/kubebuilder-release-tools@d8367c2...3c34113) --- updated-dependencies: - dependency-name: kubernetes-sigs/kubebuilder-release-tools dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 7a14bf6 - Browse repository at this point
Copy the full SHA 7a14bf6View commit details -
🌱 Bump tj-actions/changed-files from 39.2.3 to 40.1.1 (ossf#3657)
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 39.2.3 to 40.1.1. - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](tj-actions/changed-files@95690f9...25ef392) --- updated-dependencies: - dependency-name: tj-actions/changed-files dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 0f292ff - Browse repository at this point
Copy the full SHA 0f292ffView commit details -
🌱 Bump sigstore/cosign-installer from 3.1.2 to 3.2.0 (ossf#3651)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.1.2 to 3.2.0. - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@11086d2...1fc5bd3) --- updated-dependencies: - dependency-name: sigstore/cosign-installer dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 8967f45 - Browse repository at this point
Copy the full SHA 8967f45View commit details -
🌱 Bump slsa-framework/slsa-verifier from 2.4.0 to 2.4.1 (ossf#3652)
Bumps [slsa-framework/slsa-verifier](https://github.com/slsa-framework/slsa-verifier) from 2.4.0 to 2.4.1. - [Release notes](https://github.com/slsa-framework/slsa-verifier/releases) - [Changelog](https://github.com/slsa-framework/slsa-verifier/blob/main/RELEASE.md) - [Commits](slsa-framework/slsa-verifier@v2.4.0...v2.4.1) --- updated-dependencies: - dependency-name: slsa-framework/slsa-verifier dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 9d100ee - Browse repository at this point
Copy the full SHA 9d100eeView commit details -
🌱 Bump github.com/onsi/gomega from 1.29.0 to 1.30.0 (ossf#3659)
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.29.0 to 1.30.0. - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.29.0...v1.30.0) --- updated-dependencies: - dependency-name: github.com/onsi/gomega dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for d0cfcc2 - Browse repository at this point
Copy the full SHA d0cfcc2View commit details -
🌱 speedup slowest e2e tests (ossf#3656)
* switch ossfuzz test to smaller repo tensorflow/tensorflow is huge, and this causes the test to take forever. locally this reduces the test time from 17 to 2.4 seconds Signed-off-by: Spencer Schrock <sschrock@google.com> * reuse scorecard results for scorecard attestor policies previously this test took 27 seconds locally, and now takes 8. which is split across 3 subtests: good repos: 1s bad repos: 5s code review policies: 2s Signed-off-by: Spencer Schrock <sschrock@google.com> --------- Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for d6b8643 - Browse repository at this point
Copy the full SHA d6b8643View commit details -
🌱 Add dependency remediation in raw results instead of at log time (o…
…ssf#3632) * 🌱 Add dependency remediation in raw results instead of at log time Signed-off-by: AdamKorcz <adam@adalogics.com> * add unit test Signed-off-by: AdamKorcz <adam@adalogics.com> * add unit test Signed-off-by: AdamKorcz <adam@adalogics.com> * return error Signed-off-by: AdamKorcz <adam@adalogics.com> * use pointer to dependency Signed-off-by: AdamKorcz <adam@adalogics.com> * check for errors in test Signed-off-by: AdamKorcz <adam@adalogics.com> * Return nil if repo client returns an error from unsupported feature Signed-off-by: AdamKorcz <adam@adalogics.com> * revert error checking Signed-off-by: AdamKorcz <adam@adalogics.com> * revert returning nil is unsupported feature Signed-off-by: AdamKorcz <adam@adalogics.com> * Fix wrong test name Signed-off-by: AdamKorcz <adam@adalogics.com> * only create remediation when required Signed-off-by: AdamKorcz <adam@adalogics.com> * remove remediation helper function Signed-off-by: AdamKorcz <adam@adalogics.com> --------- Signed-off-by: AdamKorcz <adam@adalogics.com> Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 3ed5c7b - Browse repository at this point
Copy the full SHA 3ed5c7bView commit details -
🌱 configure dependabot to group (most) GitHub actions weekly (ossf#3655)
actions which influence the build/release process are excluded. dependabot will send individual updates for those. Signed-off-by: Spencer Schrock <sschrock@google.com> Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 1b85c52 - Browse repository at this point
Copy the full SHA 1b85c52View commit details -
Merge branch 'main' into feat/branch-protection-recognize-rule-change…
…s-only-through-pr
Configuration menu - View commit details
-
Copy full SHA for 95b09cb - Browse repository at this point
Copy the full SHA 95b09cbView commit details
Commits on Nov 17, 2023
-
doc(branch-protection): add code comment explaining different weight …
…on tier 2 scores Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 7405a47 - Browse repository at this point
Copy the full SHA 7405a47View commit details -
refactor(branch-protection): avoid duplicate if branches on reviewers…
… num comparation Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 80f60e9 - Browse repository at this point
Copy the full SHA 80f60e9View commit details -
docs(branch-protection): clarify commentings around data structure
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 6ff36d7 - Browse repository at this point
Copy the full SHA 6ff36d7View commit details -
refactor: clean code on parsing GitHub BP data
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 5759623 - Browse repository at this point
Copy the full SHA 5759623View commit details
Commits on Nov 20, 2023
-
feat(branch-protection): ressignify the nil PullRequestReviewRule to …
…mean PR not required Adapt translation of data from GitHub API, now for our internal data modeling, having a nil PullRequestReviewRule structure will mean that PRs are not required on the repo (can also mean we don't have data to ensure that). It also changes the order of the calls of copyNonAdminSettings and copyAdminSettings to make the first one be called first. This eases the code because the PullRequestReviewRule can be always instantiated at this function. Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 2efeee6 - Browse repository at this point
Copy the full SHA 2efeee6View commit details -
test(branch-protection): ensure we translate GitHub BP data as expected
Ensure we're correctly translating GitHub data from the old Branch Protection config. Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 6786caf - Browse repository at this point
Copy the full SHA 6786cafView commit details -
feat(branch-protection): adapt score evaluation after 2efeee6
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for f85e516 - Browse repository at this point
Copy the full SHA f85e516View commit details
Commits on Nov 21, 2023
-
test(branch-protection): adapt testings to changes of last commits
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 8be4fe5 - Browse repository at this point
Copy the full SHA 8be4fe5View commit details -
docs(branch-protection): add TODO comments pointing refactor opportun…
…ities Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 00ddeb0 - Browse repository at this point
Copy the full SHA 00ddeb0View commit details -
Merge branch 'main' into feat/branch-protection-recognize-rule-change…
…s-only-through-pr
Configuration menu - View commit details
-
Copy full SHA for d63e71b - Browse repository at this point
Copy the full SHA d63e71bView commit details
Commits on Dec 6, 2023
-
fix: avoid penalyzing non-admin for dismissStaleReview
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 6858790 - Browse repository at this point
Copy the full SHA 6858790View commit details -
fix(branch-protection): prevent false value from API field to become nil
When translating the API results, if the specific field `DismissesStaleReviews` had a false value, it was not being initiated in our data model and was remaining nil. Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for f187795 - Browse repository at this point
Copy the full SHA f187795View commit details -
refactor: clarify different weight on first reviewer
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 8f3d972 - Browse repository at this point
Copy the full SHA 8f3d972View commit details -
refactor: enhance clarity of loggings and comments
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 620bb93 - Browse repository at this point
Copy the full SHA 620bb93View commit details -
test(branch-protection): new test to cover different rules affecting …
…same branch Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 14acff3 - Browse repository at this point
Copy the full SHA 14acff3View commit details -
docs(branch-protection): change requirements ordering to keep admin o…
…nes together Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 5a18a16 - Browse repository at this point
Copy the full SHA 5a18a16View commit details -
refactor(branch-protection): simplify auxiliary function
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 13d0ff6 - Browse repository at this point
Copy the full SHA 13d0ff6View commit details -
refactor(branch-protection): fix code format to linter requirements
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 884e685 - Browse repository at this point
Copy the full SHA 884e685View commit details -
refactor(branch-protection): avoid unnecessary initializations and re…
…name function Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 906e487 - Browse repository at this point
Copy the full SHA 906e487View commit details -
Configuration menu - View commit details
-
Copy full SHA for ad11f66 - Browse repository at this point
Copy the full SHA ad11f66View commit details
Commits on Dec 8, 2023
-
refactor(branch-protection): use enums to represent tiers
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 20ba242 - Browse repository at this point
Copy the full SHA 20ba242View commit details -
refactor(branch-protection): remove nil fields of struct initializati…
…on when they dont contribute for clarification Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 1dd2bbd - Browse repository at this point
Copy the full SHA 1dd2bbdView commit details -
refactor(branch-protection): simplify functions by using generics
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 31b6e31 - Browse repository at this point
Copy the full SHA 31b6e31View commit details -
docs(branch-protection): update docs after generate-docs run
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for fbe061f - Browse repository at this point
Copy the full SHA fbe061fView commit details -
fix(branch-protection): fix duplicated line on code
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for a6e27c4 - Browse repository at this point
Copy the full SHA a6e27c4View commit details -
Merge branch 'main' into feat/branch-protection-recognize-rule-change…
…s-only-through-pr
Configuration menu - View commit details
-
Copy full SHA for def3081 - Browse repository at this point
Copy the full SHA def3081View commit details
Commits on Dec 11, 2023
-
fix(branch-protection): stop exporting Tier enum
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 131cadf - Browse repository at this point
Copy the full SHA 131cadfView commit details -
refactor(branch-protection): changing unchanged var to const
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for 7a0dc73 - Browse repository at this point
Copy the full SHA 7a0dc73View commit details -
test(branch-protection): Rename test and adapt it to be consistent wi…
…th its purpose I also changed the test to not require PRs, as it's how it is when a new GitHub Branch Protection config is created. The changes on the loggings numbers are due to: 1. A warning for not having DismissStaleReviews became a debug 2. Removed the warning we had for not requiring CodeOwners 3. Have a new warning for not requiring PRe Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
Configuration menu - View commit details
-
Copy full SHA for f639ebf - Browse repository at this point
Copy the full SHA f639ebfView commit details
Commits on Dec 12, 2023
-
Signed-off-by: Spencer Schrock <sschrock@google.com>
Configuration menu - View commit details
-
Copy full SHA for fd5b663 - Browse repository at this point
Copy the full SHA fd5b663View commit details -
Merge branch 'main' into feat/branch-protection-recognize-rule-change…
…s-only-through-pr Signed-off-by: Spencer Schrock <sschrock@google.com>
Configuration menu - View commit details
-
Copy full SHA for f78b2f0 - Browse repository at this point
Copy the full SHA f78b2f0View commit details