Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

setup OSSF Scorecard workflow #9317

Merged
merged 2 commits into from
Jan 24, 2024
Merged

setup OSSF Scorecard workflow #9317

merged 2 commits into from
Jan 24, 2024

Conversation

mmorel-35
Copy link
Contributor

@mmorel-35 mmorel-35 commented Jan 18, 2024

Description: setup OSSF Scorecard workflow
This will help identify and fix vulnerabilities.

OpenSSF Scorecard

@mmorel-35 mmorel-35 requested review from a team and dmitryax January 18, 2024 19:09
Signed-off-by: Matthieu MOREL <[email protected]>
Copy link
Contributor

@codeboten codeboten left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @mmorel-35!

@codeboten codeboten added the Skip Changelog PRs that do not require a CHANGELOG.md entry label Jan 18, 2024
Copy link

codecov bot commented Jan 18, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (5ab066e) 90.24% compared to head (cdc7c6d) 90.22%.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #9317      +/-   ##
==========================================
- Coverage   90.24%   90.22%   -0.02%     
==========================================
  Files         344      344              
  Lines       17996    17996              
==========================================
- Hits        16240    16237       -3     
- Misses       1428     1430       +2     
- Partials      328      329       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@mx-psi
Copy link
Member

mx-psi commented Jan 19, 2024

Will put a reminder to merge this next week, I think that's better to avoid potential issues in the release process because of the CI changes

@mx-psi
Copy link
Member

mx-psi commented Jan 24, 2024

@mmorel-35 can you fix the conflicts?

@mx-psi
Copy link
Member

mx-psi commented Jan 24, 2024

This does not modify the contrib test workflow so I am going to skip the tests and merge

@mx-psi mx-psi merged commit 5cf53ac into open-telemetry:main Jan 24, 2024
34 of 35 checks passed
@github-actions github-actions bot added this to the next release milestone Jan 24, 2024
@mmorel-35 mmorel-35 deleted the ossf branch January 24, 2024 12:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Skip Changelog PRs that do not require a CHANGELOG.md entry Skip Contrib Tests
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants