Code

✨ Improved Security Policy Check#2195

Code

Merged

spencerschrock merged 30 commits intoossf:mainossf/scorecard:mainfrom shissam:mainshissam/scorecard:mainCopy head branch name to clipboardNov 4, 2022

+517-64

Commits

Commits on Oct 20, 2022

• ✨ Improved Security Policy Check (ossf#2137)

  Show description for 91f5041
  shissam

  committed
  91f5041

  Copy full SHA for 91f5041

• Repaired Security Policy to correctly use linked content length for evaluation

  Show description for 0c59ded
  shissam

  committed
  0c59ded

  Copy full SHA for 0c59ded

• gofmt'ed changes

  Show description for 7827ea9
  shissam

  committed
  7827ea9

  Copy full SHA for 7827ea9

• Repaired the case in the evaluation which was too sensitive to content length over the length of the linked content for urls and emails

  Show description for 5a518e7
  shissam

  committed
  5a518e7

  Copy full SHA for 5a518e7

• added unit test cases for the new content-based Security Policy checks

  Show description for cad900c
  shissam

  committed
  cad900c

  Copy full SHA for cad900c

• reverted the direct (mistaken) change to checks.md and updated the checks.yaml for generate-docs

  Show description for 9f9a8e6
  shissam

  committed
  9f9a8e6

  Copy full SHA for 9f9a8e6

• ✨ Improved Security Policy Check (ossf#2137) (revisted based on comments)

  Show description for 3bb3e09
  shissam

  committed
  3bb3e09

  Copy full SHA for 3bb3e09

• revised the score value based on observation of one *or more* url(s) or one email(s) found; unit tests update accordingly

  Show description for 98e9ca1
  shissam

  committed
  98e9ca1

  Copy full SHA for 98e9ca1

• revised the score value based on observation of one *or more* url(s) or one email(s) found; unit tests update accordingly

  Show description for 80b0e17
  shissam

  committed
  80b0e17

  Copy full SHA for 80b0e17

• revised the score value based on observation of one *or more* url(s) or one email(s) found; e2e tests update accordingly

  Show description for 811b537
  shissam

  committed
  811b537

  Copy full SHA for 811b537

• Addressed PR comments; added telemetry for policy hits in security policy file to track hits by line number

  Show description for 5998703
  shissam

  committed
  5998703

  Copy full SHA for 5998703

• Resolved merge conflict with checks.yaml

  Show description for cb71397
  shissam

  committed
  cb71397

  Copy full SHA for cb71397

Commits on Oct 22, 2022

• updated raw results to emit all the raw information for the new security policy check

  Show description for 7e45c19
  shissam

  committed
  7e45c19

  Copy full SHA for 7e45c19

Commits on Oct 23, 2022

• Resolved merge conflicts and lint errors with json_raw_results.go

  Show description for c007797
  shissam

  committed
  c007797

  Copy full SHA for c007797

Commits on Oct 26, 2022

• Addressed review comments to reorganize security policy data struct to support the potential for multiple security policy files.

  Show description for ec1fcff
  shissam

  committed
  ec1fcff

  Copy full SHA for ec1fcff

Commits on Oct 27, 2022

• Added logic to the security policy to process multiple security policy files only after future improvements to aggregating scoring across such files are designed. For now the security policy behave…

  Show description for 6ef1f14
  shissam

  committed
  6ef1f14

  Copy full SHA for 6ef1f14

• added comments regarding the capacity to support multiple policy files and removed unneeded break statements in the code

  Show description for f2accd4
  shissam

  committed
  f2accd4

  Copy full SHA for f2accd4

Commits on Oct 28, 2022

• Addressed review comments to remove the dependency on the path in the filename from the code and introduced FileSize to checker.File type and removed the SecurityContentLength which was used to hol…

  Show description for 088bfb2
  shissam

  committed
  088bfb2

  Copy full SHA for 088bfb2

• restored reporting full security policy path and filename for policies found in the org level repos

  Show description for d53ce75
  shissam

  committed
  d53ce75

  Copy full SHA for d53ce75

Commits on Oct 29, 2022

• Resolved conflicts in checks.yaml for documentation

  Show description for 0dd3c1d
  shissam

  committed
  0dd3c1d

  Copy full SHA for 0dd3c1d

Commits on Nov 1, 2022

• resolved merge conflicts

  Show description for aae4808
  shissam

  committed
  aae4808

  Copy full SHA for aae4808

• Merge branch 'main' into main

  shissam

  authored
  61fed0b

  Copy full SHA for 61fed0b

• ✨ CLI for scorecard-attestor (ossf#2309)

  Show description for bd720d7
  

  raghavkaul

  authored and

  shissam

  committed
  bd720d7

  Copy full SHA for bd720d7

• Merge branch 'main' of https://github.com/shissam/scorecard into main

  shissam

  committed
  60ba3c8

  Copy full SHA for 60ba3c8

• removed whitespace before stanza for Run attestor e2e

  Show description for 776d4d6
  shissam

  committed
  776d4d6

  Copy full SHA for 776d4d6

Commits on Nov 2, 2022

• merge security-policy test branch with upstream:main

  Show description for e0739b4
  shissam

  committed
  e0739b4

  Copy full SHA for e0739b4

Commits on Nov 4, 2022

• Merge branch 'main' of https://github.com/ossf/scorecard into main

  shissam

  committed
  48719cb

  Copy full SHA for 48719cb

• resolved code review and doc review comments

  Show description for c46a581
  shissam

  committed
  c46a581

  Copy full SHA for c46a581

• Merge branch 'main' of https://github.com/ossf/scorecard into main

  shissam

  committed
  658d6d6

  Copy full SHA for 658d6d6

• repaired the link for the maintainer's guide for supporting the coordinated vulnerability disclosure guidelines

  Show description for 2668737
  shissam

  committed
  2668737

  Copy full SHA for 2668737