Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create scorecard.yml #41

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
Open

Create scorecard.yml #41

wants to merge 3 commits into from

Conversation

grom72
Copy link
Contributor

@grom72 grom72 commented Aug 29, 2024

Create scorecard workflow.

Doc-only: true.

Create scorecard workflow.

Doc-only: true.

Signed-off-by: Tomasz Gromadzki <[email protected]>
@grom72 grom72 requested a review from a team as a code owner August 29, 2024 12:34
- cron: '17 9 * * 1'
push:
branches: [ "master" ]

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should add pull_request: here so that issues are found in PRs, not once they have landed to master.

Suggested change
pull_request:

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done, however, it does not make big sense as the scorecard dose does not produce yes/no judgement

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

IIRC, it does flag errors that are found. You could try introducing one and confirm.

branches: [ "master" ]

# Declare default permissions as read only.
permissions: read-all
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is read permission needed here? The DAOS version of this workflow uses:

permissions: {}

and AFAICT seems to be functioning correctly, but maybe I am missing something.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done

Doc-only: true

Signed-off-by: Tomasz Gromadzki <[email protected]>
Doc-only: true

Signed-off-by: Tomasz Gromadzki <[email protected]>
Copy link
Contributor

@brianjmurrell brianjmurrell left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think before we land this, we need to understand how it will operate on a PR if a Scorecard issue is introduced so that we understand the UX our users will face.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants