KEMBAR78
Feature · Issue #4663 · ossf/scorecard · GitHub
Skip to content

Feature #4663

@dsm23

Description

@dsm23

Hello, I work mostly with React and TypeScript. I have recently been trying to follow best practises from the scorecard. I have got up to the point of adding fuzzing to my projects. I have added @fast-check/jest to a next.js project. However, my scorecard for fuzzing has remained at 0.

Looking at the repo code, I notice that the fuzzing checks done in <rootDir>/checks/raw/fuzzing.go around line 115 does check for the specific js test libraries but they only apply to .js and .ts. Since I'm using react and testing a react component the test file ends in .tsx.

I was hoping I could change it myself and raise a pull request but I'm not a golang developer. I'm not sure I even have golang installed on my computer so it would be hard for me to run the tests. But mostly, I'm unsure whether that file is looking for regex or glob patterns.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    Status

    Done

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions