Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Ossf scorecard db changes #2208

Merged
merged 3 commits into from Mar 1, 2023
Merged

Ossf scorecard db changes #2208

merged 3 commits into from Mar 1, 2023

Conversation

IsaacMilarky
Copy link
Contributor

@IsaacMilarky IsaacMilarky commented Feb 28, 2023 •
edited

Description

  • Make the OSSF Scorecard task insert the overall score for each repo under the name OSSF_SCORECARD_AGGREGATE_SCORE
  • Remove status field on repo_deps_scorecard and replace it with scorecard_check_details which holds a json object with information about the current ossf scorecard check. This is to adapt to scorecard metrics changing frequently
  • The OSSF Scorecard task also uses an on conflict do update like the other dependency tasks.

Signed commits

  • Yes, I signed my commits.

@IsaacMilarky
Change repo_deps_scorecard to not have a status but instead have a de…
1479c4e 
…tails field to handle changing scorecard organization of data. Scorecard now also returns data in json format

Signed-off-by: Isaac Milarsky <imilarsky@gmail.com>
@IsaacMilarky
log changes
46b9d82 
Signed-off-by: Isaac Milarsky <imilarsky@gmail.com>
@IsaacMilarky
remove unneeded function declaration
2b5d877 
Signed-off-by: Isaac Milarsky <imilarsky@gmail.com>
@sgoggins sgoggins merged commit fc53680 into dev Mar 1, 2023
@sgoggins sgoggins deleted the ossf-scorecard-db-changes branch March 20, 2023 20:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@sgoggins sgoggins sgoggins approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@IsaacMilarky @sgoggins