Skip to content

fix: skip Scorecard badge when project is not scored#3

Merged
j7an merged 1 commit intomainfrom
fix/scorecard-404
Apr 3, 2026
Merged

fix: skip Scorecard badge when project is not scored#3
j7an merged 1 commit intomainfrom
fix/scorecard-404

Conversation

@j7an
Copy link
Copy Markdown
Owner

@j7an j7an commented Apr 3, 2026

Summary

  • astral-sh/setup-uv returns 404 from Scorecard API (project not scored)
  • The badge URL renders as a broken image in the tracking issue
  • The Scorecard viewer link leads to an error page

Fix

Check Scorecard API status at issue creation time. If 404 (or timeout):

  • Skip the badge entirely
  • Omit the Scorecard row from the security links table
  • GHSA, OSV, and GitHub Releases links still appear

@j7an j7an merged commit bb74622 into main Apr 3, 2026
j7an added a commit that referenced this pull request Apr 12, 2026
fix: skip Scorecard badge when project is not scored
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant