checks.yaml

Signed-off-by: Avishay <[email protected]>
balteravishay · Apr 14, 2023 · 7e37e4b · 7e37e4b
1 parent 1476084
commit 7e37e4b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/docs/checks.md b/docs/checks.md
@@ -102,7 +102,7 @@ Note: If Scorecard is run without an administrative access token, the requiremen
 Tier 1 Requirements (3/10 points):
   - Prevent force push
   - Prevent branch deletion
-  - For administrators: Do not allow bypassing the above settings
+  - For administrators: Include administrator for review
 
 Tier 2 Requirements (6/10 points):
   - Required reviewers >=1

diff --git a/docs/checks/internal/checks.yaml b/docs/checks/internal/checks.yaml
@@ -502,7 +502,7 @@ checks:
     remediation:
       - >-
         If your project is producing an application, declare all your dependencies with specific versions in your package
-        format file (e.g. `package.json` for npm, `requirements.txt` for python).
+        format file (e.g. `package.json` for npm, `requirements.txt` for python, `packages.config` for nuget).
         For C/C++, check in the code from a trusted source and add a `README` on the
         specific version used (and the archive SHA hashes).
       - >-