Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tools: add scorecard ci #47254

Merged
merged 1 commit into from
Mar 30, 2023
Merged

Conversation

mateonunez
Copy link
Contributor

This Pull Request aims to integrate the scorecard CI, and to include a badge that exhibits the project's evaluation score as reported in nodejs/security-wg#929.

The enhancement of the score will be achieved through the merging of a PR that incorporates the specified version of the actions, as referenced in #46820.

@nodejs-github-bot
Copy link
Collaborator

Review requested:

  • @nodejs/actions

@nodejs-github-bot nodejs-github-bot added doc Issues and PRs related to the documentations. meta Issues and PRs related to the general management of the project. labels Mar 25, 2023
@tniessen
Copy link
Member

I think we have consciously decided against a variety of available "badges" in the README. I am wondering if this one is helpful to people who come across the README.

@mateonunez
Copy link
Contributor Author

I think we have consciously decided against a variety of available "badges" in the README. I am wondering if this one is helpful to people who come across the README.

I see. Also in undici the scorecard was implemented without the "badge" in the readme. I think it can be avoided in the readme file. Let's see what @RafaelGSS means with the Add a scorecard label to the Node.js README task.

@RafaelGSS
Copy link
Member

I'm fine removing the badge too. We'll have a report.md in the security-wg. That should be fine.

@RafaelGSS
Copy link
Member

@nodejs/security-wg could you please review it?

Copy link
Member

@RafaelGSS RafaelGSS left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you please fix the commit message? it should be tools: XX (considering you are also removing the badge)

@RafaelGSS RafaelGSS changed the title feat: add scorecard ci and score badge tools: add scorecard ci Mar 29, 2023
Copy link
Member

@UlisesGascon UlisesGascon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! 🚀

@RafaelGSS RafaelGSS added the commit-queue Add this label to land a pull request using GitHub Actions. label Mar 30, 2023
@nodejs-github-bot nodejs-github-bot added commit-queue-failed An error occurred while landing this pull request using GitHub Actions. and removed commit-queue Add this label to land a pull request using GitHub Actions. labels Mar 30, 2023
@nodejs-github-bot
Copy link
Collaborator

Commit Queue failed
- Loading data for nodejs/node/pull/47254
✔  Done loading data for nodejs/node/pull/47254
----------------------------------- PR info ------------------------------------
Title      tools: add scorecard ci (#47254)
Author     Mateo Nunez  (@mateonunez, first-time contributor)
Branch     mateonunez:feat/add-scorecard -> nodejs:main
Labels     doc, meta
Commits    1
 - tools: add scorecard workflow
Committers 1
 - mateonunez 
PR-URL: https://github.com/nodejs/node/pull/47254
Reviewed-By: Rafael Gonzaga 
------------------------------ Generated metadata ------------------------------
PR-URL: https://github.com/nodejs/node/pull/47254
Reviewed-By: Rafael Gonzaga 
--------------------------------------------------------------------------------
   ℹ  This PR was created on Sat, 25 Mar 2023 15:57:35 GMT
   ✔  Approvals: 1
   ✔  - Rafael Gonzaga (@RafaelGSS) (TSC): https://github.com/nodejs/node/pull/47254#pullrequestreview-1362648093
   ✘  This PR needs to wait 49 more hours to land (or 0 hours if there is one more approval)
   ✔  Last GitHub CI successful
   ℹ  Green GitHub CI is sufficient
--------------------------------------------------------------------------------
   ✔  Aborted `git node land` session in /home/runner/work/node/node/.ncu
https://github.com/nodejs/node/actions/runs/4565236989

Copy link
Member

@mhdawson mhdawson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Member

@marco-ippolito marco-ippolito left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@RafaelGSS RafaelGSS added commit-queue Add this label to land a pull request using GitHub Actions. and removed commit-queue-failed An error occurred while landing this pull request using GitHub Actions. labels Mar 30, 2023
@nodejs-github-bot nodejs-github-bot removed the commit-queue Add this label to land a pull request using GitHub Actions. label Mar 30, 2023
@nodejs-github-bot nodejs-github-bot merged commit 04cfb82 into nodejs:main Mar 30, 2023
@nodejs-github-bot
Copy link
Collaborator

Landed in 04cfb82

@mateonunez mateonunez deleted the feat/add-scorecard branch March 30, 2023 14:55
RafaelGSS pushed a commit that referenced this pull request Apr 5, 2023
PR-URL: #47254
Reviewed-By: Rafael Gonzaga <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
@RafaelGSS RafaelGSS mentioned this pull request Apr 6, 2023
RafaelGSS pushed a commit that referenced this pull request Apr 6, 2023
PR-URL: #47254
Reviewed-By: Rafael Gonzaga <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
RafaelGSS pushed a commit that referenced this pull request Apr 7, 2023
PR-URL: #47254
Reviewed-By: Rafael Gonzaga <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
danielleadams pushed a commit that referenced this pull request Jul 6, 2023
PR-URL: #47254
Reviewed-By: Rafael Gonzaga <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
doc Issues and PRs related to the documentations. meta Issues and PRs related to the general management of the project.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants