Skip to content

Conversation

@jeffmendoza
Copy link
Member

Add 3 new policies to allstar.

  • Security.md to verify that exists.
  • Outside collaborator, to prevent admins outside an org.
  • Binary Artifacts, the first policy adapted from a scorecard check.

Note: moving to an older version of go-github to match scorecard until google/go-github#2016 is released.

Checks that file exists and is not empty. Issue action supported, Fix action to
be added in the future
Policy to disallow outside collaborators with admin or push access.
This is the first policy that uses a scorecard check. Needed to move to v32 of
go-github to match scorecard. Future go-github should allow easy conversion.
if err != nil {
t.Fatalf("Unexpected error: %v", err)
}
if !reflect.DeepEqual(res, &test.Exp) {

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider using github.com/google/go-cmp/cmp here.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

TIL, will do.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated ptal.

azeemshaikh38
azeemshaikh38 previously approved these changes Jul 23, 2021
@jeffmendoza
Copy link
Member Author

@azeemshaikh38 @laurentsimon Can I get this re-approved ( I have dismiss stale turned on )

@azeemshaikh38
Copy link

@azeemshaikh38 @laurentsimon Can I get this re-approved ( I have dismiss stale turned on )

done.

@jeffmendoza jeffmendoza merged commit 70d3e36 into ossf:main Jul 26, 2021
@jeffmendoza jeffmendoza deleted the new-policies branch July 26, 2021 17:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants