Add OpenSSF scorecard badge

This commit is contained in:
abhisek 2023-02-16 15:37:48 +05:30
parent 23c71ee662
commit 9c1e224a43
No known key found for this signature in database
GPG Key ID: CB92A4990C02A88F
3 changed files with 6 additions and 1 deletions

View File

@ -4,7 +4,10 @@
helps engineering and security teams to identify potential issues in their open helps engineering and security teams to identify potential issues in their open
source dependencies and evaluate them against organizational policies. source dependencies and evaluate them against organizational policies.
[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/safedep/vet/badge)](https://api.securityscorecards.dev/projects/github.com/safedep/vet)
[![CodeQL](https://github.com/safedep/vet/actions/workflows/codeql.yml/badge.svg?branch=main)](https://github.com/safedep/vet/actions/workflows/codeql.yml) [![CodeQL](https://github.com/safedep/vet/actions/workflows/codeql.yml/badge.svg?branch=main)](https://github.com/safedep/vet/actions/workflows/codeql.yml)
[![Scorecard supply-chain security](https://github.com/safedep/vet/actions/workflows/scorecard.yml/badge.svg)](https://github.com/safedep/vet/actions/workflows/scorecard.yml)
## TL;DR ## TL;DR

View File

@ -85,6 +85,8 @@ func (pw *parserWrapper) Ecosystem() string {
return models.EcosystemPub return models.EcosystemPub
case "requirements.txt": case "requirements.txt":
return models.EcosystemPyPI return models.EcosystemPyPI
case "Pipfile.lock":
return models.EcosystemPyPI
case "yarn.lock": case "yarn.lock":
return models.EcosystemNpm return models.EcosystemNpm
case "gradle.lockfile": case "gradle.lockfile":

View File

@ -8,7 +8,7 @@ import (
func TestListParser(t *testing.T) { func TestListParser(t *testing.T) {
parsers := List() parsers := List()
assert.Equal(t, 9, len(parsers)) assert.Equal(t, 10, len(parsers))
} }
func TestInvalidEcosystemMapping(t *testing.T) { func TestInvalidEcosystemMapping(t *testing.T) {