Skip to content

tools: add scorecard ci - #47254

Merged
nodejs-github-bot merged 1 commit into
nodejs:mainfrom
mateonunez:feat/add-scorecard
Mar 30, 2023
Merged

tools: add scorecard ci#47254
nodejs-github-bot merged 1 commit into
nodejs:mainfrom
mateonunez:feat/add-scorecard

Conversation

@mateonunez

Copy link
Copy Markdown
Contributor

This Pull Request aims to integrate the scorecard CI, and to include a badge that exhibits the project's evaluation score as reported in nodejs/security-wg#929.

The enhancement of the score will be achieved through the merging of a PR that incorporates the specified version of the actions, as referenced in #46820.

@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/actions

@nodejs-github-botnodejs-github-bot added doc Issues and PRs related to the documentations. meta Issues and PRs related to the general management of the project. labels Mar 25, 2023
@tniessen

Copy link
Copy Markdown
Member

I think we have consciously decided against a variety of available "badges" in the README. I am wondering if this one is helpful to people who come across the README.

@mateonunez

Copy link
Copy Markdown
ContributorAuthor

I think we have consciously decided against a variety of available "badges" in the README. I am wondering if this one is helpful to people who come across the README.

I see. Also in undici the scorecard was implemented without the "badge" in the readme. I think it can be avoided in the readme file. Let's see what @RafaelGSS means with the Add a scorecard label to the Node.js README task.

@RafaelGSS

Copy link
Copy Markdown
Member

I'm fine removing the badge too. We'll have a report.md in the security-wg. That should be fine.

@RafaelGSS

Copy link
Copy Markdown
Member

@nodejs/security-wg could you please review it?

@RafaelGSSRafaelGSS left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you please fix the commit message? it should be tools: XX (considering you are also removing the badge)

@RafaelGSSRafaelGSS changed the title feat: add scorecard ci and score badge tools: add scorecard ciMar 29, 2023

@UlisesGasconUlisesGascon left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! 🚀

@RafaelGSSRafaelGSS added the commit-queue Add this label to land a pull request using GitHub Actions. label Mar 30, 2023
@nodejs-github-botnodejs-github-bot added commit-queue-failed An error occurred while landing this pull request using GitHub Actions. and removed commit-queue Add this label to land a pull request using GitHub Actions. labels Mar 30, 2023
@nodejs-github-bot

Copy link
Copy Markdown
Collaborator
Commit Queue failed
- Loading data for nodejs/node/pull/47254
✔ Done loading data for nodejs/node/pull/47254
----------------------------------- PR info ------------------------------------
Title tools: add scorecard ci (#47254)
Author Mateo Nunez (@mateonunez, first-time contributor)
Branch mateonunez:feat/add-scorecard -> nodejs:main
Labels doc, meta
Commits 1
- tools: add scorecard workflow
Committers 1
- mateonunez PR-URL: https://github.com/nodejs/node/pull/47254
Reviewed-By: Rafael Gonzaga ------------------------------ Generated metadata ------------------------------
PR-URL: https://github.com/nodejs/node/pull/47254
Reviewed-By: Rafael Gonzaga --------------------------------------------------------------------------------
ℹ This PR was created on Sat, 25 Mar 2023 15:57:35 GMT
✔ Approvals: 1
✔ - Rafael Gonzaga (@RafaelGSS) (TSC): https://github.com/nodejs/node/pull/47254#pullrequestreview-1362648093
✘ This PR needs to wait 49 more hours to land (or 0 hours if there is one more approval)
✔ Last GitHub CI successful
ℹ Green GitHub CI is sufficient
--------------------------------------------------------------------------------
✔ Aborted `git node land` session in /home/runner/work/node/node/.ncu
https://github.com/nodejs/node/actions/runs/4565236989

@mhdawsonmhdawson left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@marco-ippolitomarco-ippolito left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@RafaelGSSRafaelGSS added commit-queue Add this label to land a pull request using GitHub Actions. and removed commit-queue-failed An error occurred while landing this pull request using GitHub Actions. labels Mar 30, 2023
@nodejs-github-botnodejs-github-bot removed the commit-queue Add this label to land a pull request using GitHub Actions. label Mar 30, 2023
@nodejs-github-bot
nodejs-github-bot merged commit 04cfb82 into nodejs:mainMar 30, 2023
@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

Landed in 04cfb82

@mateonunez
mateonunez deleted the feat/add-scorecard branch March 30, 2023 14:55
RafaelGSS pushed a commit that referenced this pull request Apr 5, 2023
PR-URL: #47254
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Reviewed-By: Michael Dawson <midawson@redhat.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
@RafaelGSSRafaelGSS mentioned this pull request Apr 6, 2023
RafaelGSS pushed a commit that referenced this pull request Apr 6, 2023
PR-URL: #47254
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Reviewed-By: Michael Dawson <midawson@redhat.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
RafaelGSS pushed a commit that referenced this pull request Apr 7, 2023
PR-URL: #47254
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Reviewed-By: Michael Dawson <midawson@redhat.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
danielleadams pushed a commit that referenced this pull request Jul 6, 2023
PR-URL: #47254
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Reviewed-By: Michael Dawson <midawson@redhat.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

docIssues and PRs related to the documentations.metaIssues and PRs related to the general management of the project.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants

@mateonunez@nodejs-github-bot@tniessen@RafaelGSS@fraxken@UlisesGascon@mhdawson@marco-ippolito