Skip to content

setup ossf scorecard and codeql workflows - #564

Merged
SuperQ merged 3 commits into
prometheus:mainfrom
mmorel-35:ossf
Jan 18, 2025
Merged

setup ossf scorecard and codeql workflows#564
SuperQ merged 3 commits into
prometheus:mainfrom
mmorel-35:ossf

Conversation

@mmorel-35

@mmorel-35 mmorel-35 commented Jan 11, 2024 •
edited
Loading

Copy link
Copy Markdown
Contributor

setup ossf scorecard and codeql workflows

Also add the ossf scorecard badge in the Readme.md

OpenSSF Scorecard

Signed-off-by: Matthieu MOREL matthieu.morel35@gmail.com
@github-advanced-security

github-advanced-security AI commented Jan 11, 2024

Copy link
Copy Markdown

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.
@mmorel-35
mmorel-35 marked this pull request as draft January 11, 2024 20:16
mmorel-35
mmorel-35 commented Jan 11, 2024
View reviewed changes
Comment thread .github/workflows/golangci-lint.yml Outdated
@mmorel-35
mmorel-35 marked this pull request as ready for review January 11, 2024 20:20
SuperQ
SuperQ requested changes Feb 28, 2024
View reviewed changes
Comment thread .github/workflows/golangci-lint.yml Outdated
@mmorel-35
mmorel-35 requested a review from SuperQ October 20, 2024 09:29
@mmorel-35 mmorel-35 changed the title setup ossf scorecard and codql workflows Oct 23, 2024
@mmorel-35
setup ossf scorecard and codql workflows
1a14d88 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
SuperQ
SuperQ reviewed Jan 18, 2025
View reviewed changes
Comment thread .github/workflows/codeql.yml
SuperQ
SuperQ reviewed Jan 18, 2025
View reviewed changes
Comment thread .github/workflows/codeql.yml Outdated
@github-advanced-security

github-advanced-security AI commented Jan 18, 2025

Copy link
Copy Markdown

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.
@mmorel-35
fix indentation
64e3077 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
@mmorel-35
mmorel-35 requested a review from SuperQ January 18, 2025 10:57
@SuperQ
SuperQ merged commit 1cc5297 into prometheus:main Jan 18, 2025
@mmorel-35
mmorel-35 deleted the ossf branch January 18, 2025 13:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

3 participants

@mmorel-35 @github-advanced-security @SuperQ