safedep/vet
1
0
Fork 0
mirror of https://github.com/safedep/vet.git synced 2025-12-10 00:22:08 -06:00
Code Issues Packages Projects Releases 68 Wiki Activity

Add OpenSSF scorecard badge

Browse Source
This commit is contained in:
abhisek 2023-02-16 15:37:48 +05:30
parent 23c71ee662
commit 9c1e224a43
No known key found for this signature in database
GPG Key ID: CB92A4990C02A88F
3 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
README.md
View File

@ -4,7 +4,10 @@
helps engineering and security teams to identify potential issues in their open
source dependencies and evaluate them against organizational policies.
[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/safedep/vet/badge)](https://api.securityscorecards.dev/projects/github.com/safedep/vet)
[![CodeQL](https://github.com/safedep/vet/actions/workflows/codeql.yml/badge.svg?branch=main)](https://github.com/safedep/vet/actions/workflows/codeql.yml)
[![Scorecard supply-chain security](https://github.com/safedep/vet/actions/workflows/scorecard.yml/badge.svg)](https://github.com/safedep/vet/actions/workflows/scorecard.yml)
## TL;DR

2
pkg/parser/parser.go
View File

@ -85,6 +85,8 @@ func (pw *parserWrapper) Ecosystem() string {
return models.EcosystemPub
case "requirements.txt":
return models.EcosystemPyPI
case "Pipfile.lock":
return models.EcosystemPyPI
case "yarn.lock":
return models.EcosystemNpm
case "gradle.lockfile":

2
pkg/parser/parser_test.go
View File

@ -8,7 +8,7 @@ import (
func TestListParser(t *testing.T) {
parsers := List()
assert.Equal(t, 9, len(parsers))
assert.Equal(t, 10, len(parsers))
}
func TestInvalidEcosystemMapping(t *testing.T) {