Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: describe usage #176

Merged
merged 6 commits into from
May 16, 2024
Merged

docs: describe usage #176

merged 6 commits into from
May 16, 2024

Conversation

xopham
Copy link
Contributor

@xopham xopham commented Apr 12, 2024

No description provided.

Copy link

github-actions bot commented Apr 12, 2024

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA b71a654.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/actions/checkout 9bb56186c3b09b4f86b1c65136769dd318469633 🟢 7.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1021 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
Vulnerabilities🟢 100 existing vulnerabilities detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
actions/actions/setup-python 82c7e631bb3cdc910f68e0081d67478d79c6982d 🟢 5.4
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 33 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 3
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Fuzzing⚠️ 0project is not fuzzed
Security-Policy🟢 9security policy file detected
SAST🟢 10SAST tool is run on all commits
Vulnerabilities⚠️ 046 existing vulnerabilities detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
actions/snok/install-poetry 93ada01c735cc8a383ce0ce2ae205a21c415379b 🟢 4
Details
CheckScoreReason
Code-Review🟢 6Found 7/11 approved changesets -- score normalized to 6
Maintained⚠️ 00 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0

Scanned Manifest Files

.github/workflows/.reusable-unit-test.yml

Copy link

github-actions bot commented Apr 12, 2024

Coverage

Coverage Report
FileStmtsMissCoverMissing
semgr8s
   __main__.py16160%5–29
   app.py78396%116, 175–176
   k8s_api.py22291%43–44
   updater.py29293%49–50
TOTAL1972388% 

Tests Skipped Failures Errors Time
18 0 💤 0 ❌ 0 🔥 2.075s ⏱️

Copy link

@github-advanced-security github-advanced-security bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

checkov found more than 20 potential problems in the proposed changes. Check the Files changed tab for more details.

rules/forbidden-pod-label.test.yaml Fixed Show fixed Hide fixed
rules/forbidden-pod-label.test.yaml Fixed Show fixed Hide fixed
rules/forbidden-pod-label.test.yaml Fixed Show fixed Hide fixed
rules/forbidden-pod-label.test.yaml Fixed Show fixed Hide fixed
rules/forbidden-workload-label.test.yaml Fixed Show fixed Hide fixed
rules/template-autofix-rule.test.yaml Fixed Show fixed Hide fixed
rules/template-rule.test.yaml Fixed Show fixed Hide fixed
rules/template-rule.test.yaml Fixed Show fixed Hide fixed
rules/template-rule.test.yaml Fixed Show fixed Hide fixed
rules/template-rule.test.yaml Fixed Show fixed Hide fixed
@xopham xopham force-pushed the docs/describe-usage branch 5 times, most recently from ebcd898 to bbc4c32 Compare April 12, 2024 22:20
@xopham xopham force-pushed the docs/describe-usage branch 4 times, most recently from ebccb13 to e4927ca Compare May 6, 2024 16:14
@xopham xopham force-pushed the docs/describe-usage branch 2 times, most recently from 097a63c to 153e030 Compare May 16, 2024 14:17
@xopham xopham force-pushed the docs/describe-usage branch from 153e030 to b71a654 Compare May 16, 2024 14:17
@xopham xopham merged commit 2f8f6e2 into dev May 16, 2024
39 checks passed
@xopham xopham deleted the docs/describe-usage branch May 16, 2024 14:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant