Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

✨ Enable Scorecard badge #941

Merged
merged 1 commit into from
Jul 27, 2022
Merged

Conversation

azeemshaikh38
Copy link
Contributor

Summary

This PR signs up Sigstore to be an early adopter of Scorecard badge.

Release Note

NONE

Documentation

NONE

@azeemshaikh38 azeemshaikh38 requested review from cpanato and a team as code owners July 27, 2022 20:42
Signed-off-by: Azeem Shaikh <azeems@google.com>
@bobcallaway
Copy link
Member

https://api.securityscorecards.dev/projects/github.com/sigstore/rekor returns a 404, is that expected?

@azeemshaikh38
Copy link
Contributor Author

https://api.securityscorecards.dev/projects/github.com/sigstore/rekor returns a 404, is that expected?

Yes, because there is no result from the action run published yet. Once this PR is submitted and the action runs on the commit, the API will automatically start returning the latest result JSON.

@bobcallaway bobcallaway merged commit 5ef8eb2 into sigstore:main Jul 27, 2022
@github-actions github-actions bot added this to the v1.0.0 milestone Jul 27, 2022
bobcallaway pushed a commit to bobcallaway/rekor that referenced this pull request Aug 3, 2022
Signed-off-by: Azeem Shaikh <azeems@google.com>

Co-authored-by: Azeem Shaikh <azeems@google.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants