-
Notifications
You must be signed in to change notification settings - Fork 578
🐛 do not allow unsupported ListReleases
to fail a run
#4677
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
🐛 do not allow unsupported ListReleases
to fail a run
#4677
Conversation
Signed-off-by: Jamie Magee <jamie.magee@gmail.com>
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #4677 +/- ##
==========================================
- Coverage 66.80% 66.72% -0.09%
==========================================
Files 230 249 +19
Lines 16602 18884 +2282
==========================================
+ Hits 11091 12600 +1509
- Misses 4808 5452 +644
- Partials 703 832 +129 🚀 New features to boost your workflow:
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Branch-Protection and SBOM changes LGTM. Question about Signed-Releases
Signed-off-by: Jamie Magee <jamie.magee@gmail.com>
cffbf82
to
ce861e1
Compare
/scdiff generate Branch-Protection,Signed-Releases |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks!
What kind of change does this PR introduce?
This check allows clients which currently do not support
ListReleases
to complete a Scorecard run. Currentlyazuredevopsrepo
,localdir
, andgit
do not supportListReleases
.This is a follow-up from #4533, with PR comments addressed, after I let that PR go stale.
What is the current behavior?
Currently, running
scorecard
against a client that does not supportListReleases
results in a non-zero exit code, and an error printed to the console:What is the new behavior (if this is a feature change)?**
Partial results for the checks that partially rely on
ListReleases
(Branch-Protection
,SBOM
) and no results forSigned-Releases
.Which issue(s) this PR fixes
NONE
Special notes for your reviewer
Does this PR introduce a user-facing change?
For user-facing changes, please add a concise, human-readable release note to
the
release-note
(In particular, describe what changes users might need to make in their
application as a result of this pull request.)