stacklok / minder / 9092529786
53%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 192
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 49.385% (+0.2%) from 49.197%
9092529786

push

github

web-flow 
Improve Trusty integration (#3277)

* Flag malicious deps in trusty PR comment

This PR surfaces the trusty malicious data to the comment added
by minder when the trusty evaluator inspects a PR.

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Add tests for trusty utility funcs

This commit adds a few unit tests to some of the new utility functions
handling the trusty evaluator.

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Add support for activity and provenance scores

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Surface score components and malcs deetz

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Trusty: Drop configuration getter from conf

This commit drops the configuration getter from the trusty
ecosystem config. As we now have access to the individual components
we can write rules on each of them independent of each other.

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Expose all trusty data with new tamplate

This commit implements the new trusty template which exposes all
score components.

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Drop noop alerts

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Trusty: Add simple test for PR template

This commit adds a simple test to ensure the comment template
parses correctly.

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Surface Deprecated and Archived packages in PR

Signed-off-by: Adolfo García Veytia (puerco) <puerco@stacklok.com>

* Flip blocking logic and base it on defaults

Signed-off-by: Adolfo García Veytia (puerco) <puerco@stacklok.com>

---------

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>
Signed-off-by: Adolfo García Veytia (puerco) <puerco@stacklok.com>

45 of 256 new or added lines in 3 files covered. (17.58%)

6 existing lines in 2 files now uncovered.

9160 of 18548 relevant lines covered (49.39%)

53.26 hits per line

New Missed Lines in Diff

Lines Coverage ∆ File
12
19.61
 19.61% internal/engine/eval/trusty/config.go
99
7.52
 7.52% internal/engine/eval/trusty/actions.go
100
36.57
 36.57% internal/engine/eval/trusty/trusty.go

Uncovered Existing Lines

Lines Coverage ∆ File
1
7.52
 7.52% internal/engine/eval/trusty/actions.go
5
36.57
 36.57% internal/engine/eval/trusty/trusty.go
Jobs
ID Job ID Ran Files Coverage
1 9092529786.1 192
49.39
 GitHub Action Run
Source Files on build 9092529786