stacklok / minder / 9092529786

53%

Build Type

push

github

Committed by web-flow

Commit Message

Improve Trusty integration (#3277)

* Flag malicious deps in trusty PR comment

This PR surfaces the trusty malicious data to the comment added
by minder when the trusty evaluator inspects a PR.

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Add tests for trusty utility funcs

This commit adds a few unit tests to some of the new utility functions
handling the trusty evaluator.

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Add support for activity and provenance scores

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Surface score components and malcs deetz

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Trusty: Drop configuration getter from conf

This commit drops the configuration getter from the trusty
ecosystem config. As we now have access to the individual components
we can write rules on each of them independent of each other.

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Expose all trusty data with new tamplate

This commit implements the new trusty template which exposes all
score components.

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Drop noop alerts

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Trusty: Add simple test for PR template

This commit adds a simple test to ensure the comment template
parses correctly.

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Surface Deprecated and Archived packages in PR

Signed-off-by: Adolfo García Veytia (puerco) <puerco@stacklok.com>

* Flip blocking logic and base it on defaults

Signed-off-by: Adolfo García Veytia (puerco) <puerco@stacklok.com>

---------

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>
Signed-off-by: Adolfo García Veytia (puerco) <puerco@stacklok.com>

Run Details

45 of 256 new or added lines in 3 files covered. (17.58%)

6 existing lines in 2 files now uncovered.

9160 of 18548 relevant lines covered (49.39%)

53.26 hits per line