Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't create issues for dangerous workflows when we have an inconclus… #483

Merged
merged 1 commit into from
Jan 8, 2024

Conversation

coheigea
Copy link
Contributor

@coheigea coheigea commented Jan 8, 2024

…ive result

Since the recent update we are getting a ton of issues created for dangerous workflows, when the repo in question don't contain any github action workflows. The PR changes the check to pass if we have an inconclusive result (no workflows found)

@coheigea
Copy link
Contributor Author

coheigea commented Jan 8, 2024

FAO @jeffmendoza

@jeffmendoza jeffmendoza merged commit 3521ed8 into ossf:main Jan 8, 2024
@jeffmendoza
Copy link
Member

Do you think this is a bug in Scorecard, or just a new result that we were not processing correctly here in this Allstar policy?

@coheigea coheigea deleted the coheigea/dangerous-workflow branch January 9, 2024 05:24
@coheigea
Copy link
Contributor Author

coheigea commented Jan 9, 2024

I don't think it's a bug in scorecard, we just weren't properly checking for an inconclusive result.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants