Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

sparkles: add ListProgrammingLanguages for Azure DevOps #4432

Merged

Conversation

JamieMagee
Copy link
Contributor

What kind of change does this PR introduce?

What is the current behavior?

ListProgrammingLanguages throws an unsupported error for Azure DevOps

What is the new behavior (if this is a feature change)?**

  • Tests for the changes have been added (for bug fixes/features)

Which issue(s) this PR fixes

Next step of #4177

Special notes for your reviewer

I also fixed a bug in the zip implementation when testing the Fuzzing check

Does this PR introduce a user-facing change?

For user-facing changes, please add a concise, human-readable release note to
the release-note

(In particular, describe what changes users might need to make in their
application as a result of this pull request.)

 add `ListProgrammingLanguages` for Azure DevOps

@JamieMagee JamieMagee requested a review from a team as a code owner December 4, 2024 00:43
@JamieMagee JamieMagee requested review from justaugustus and spencerschrock and removed request for a team December 4, 2024 00:43
@JamieMagee
Copy link
Contributor Author

The Fuzzing check now completes

$ env SCORECARD_EXPERIMENTAL=1 go run ./. --repo https://dev.azure.com/jamiemagee/jamiemagee/_git/scorecard --checks Fuzzing
Starting [Fuzzing]
2024/12/03 16:42:27 Project language analytics not ready yet. Results may be incomplete.
Finished [Fuzzing]

RESULTS
-------
Aggregate score: 10.0 / 10

Check scores:
|---------|---------|-------------------|--------------------------------------------------------------------------------------------------------|
|  SCORE  |  NAME   |      REASON       |                                       DOCUMENTATION/REMEDIATION                                        |
|---------|---------|-------------------|--------------------------------------------------------------------------------------------------------|
| 10 / 10 | Fuzzing | project is fuzzed | https://github.com/ossf/scorecard/blob/cec55d4c7c32794902ff89ce9a38bfd9b20285d9/docs/checks.md#fuzzing |
|---------|---------|-------------------|--------------------------------------------------------------------------------------------------------|

@JamieMagee
Copy link
Contributor Author

Looks like the test zip file and an actual zip file from Azure DevOps are different. Here's the test data

Details
$ 7z l clients/azuredevopsrepo/testdata/basic.zip

7-Zip [64] 17.05 : Copyright (c) 1999-2021 Igor Pavlov : 2017-08-28
p7zip Version 17.05 (locale=en_US.UTF-8,Utf16=on,HugeFiles=on,64 bits,32 CPUs x64)

Scanning the drive for archives:
1 file, 699 bytes (1 KiB)

Listing archive: clients/azuredevopsrepo/testdata/basic.zip

--
Path = clients/azuredevopsrepo/testdata/basic.zip
Type = zip
Physical Size = 699

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2021-06-30 12:46:16 D....            0            0  dir1/
2021-06-30 12:46:31 D....            0            0  dir1/dir2/
2021-06-30 12:46:31 .....            9            9  dir1/dir2/file2
2021-06-30 12:46:08 .....            9            9  dir1/file1
2021-06-30 12:46:43 .....            9            9  file0
------------------- ----- ------------ ------------  ------------------------
2021-06-30 12:46:43                 27           27  3 files, 2 folders

And the scorecard repository

Details
$ 7z l scorecard.zip

7-Zip [64] 17.05 : Copyright (c) 1999-2021 Igor Pavlov : 2017-08-28
p7zip Version 17.05 (locale=en_US.UTF-8,Utf16=on,HugeFiles=on,64 bits,32 CPUs x64)

Scanning the drive for archives:
1 file, 22043126 bytes (22 MiB)

Listing archive: scorecard.zip

--
Path = scorecard.zip
Type = zip
Physical Size = 22043126

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2024-12-04 05:02:44 .....          838          406  .codecov.yml
2024-12-04 05:02:44 .....          478          276  .github/CODEOWNERS
2024-12-04 05:02:44 .....          432          252  .github/ISSUE_TEMPLATE/bug_report.md
2024-12-04 05:02:44 .....          614          315  .github/ISSUE_TEMPLATE/feature_request.md
2024-12-04 05:02:44 .....         1317          737  .github/PULL_REQUEST_TEMPLATE.md
2024-12-04 05:02:44 .....         1344          545  .github/dependabot.yml
2024-12-04 05:02:44 .....         3817         1913  .github/workflows/codeql-analysis.yml
2024-12-04 05:02:44 .....          980          597  .github/workflows/depsreview.yml
2024-12-04 05:02:44 .....         3207         1467  .github/workflows/docker.yml
2024-12-04 05:02:44 .....         3214         1551  .github/workflows/gitlab.yml
2024-12-04 05:02:44 .....         4108         1776  .github/workflows/goreleaser.yaml
2024-12-04 05:02:44 .....         3263         1557  .github/workflows/integration.yml
2024-12-04 05:02:44 .....         1222          658  .github/workflows/lint.yml
2024-12-04 05:02:44 .....        13495         2570  .github/workflows/main.yml
2024-12-04 05:02:44 .....         2125         1183  .github/workflows/publishimage.yml
2024-12-04 05:02:44 .....         4848         1692  .github/workflows/scdiff.yml
2024-12-04 05:02:44 .....         2035          957  .github/workflows/scorecard-analysis.yml
2024-12-04 05:02:44 .....         2101          907  .github/workflows/slsa-goreleaser.yml
2024-12-04 05:02:44 .....         1761          939  .github/workflows/stale.yml
2024-12-04 05:02:44 .....         1251          766  .github/workflows/verify.yml
2024-12-04 05:02:44 .....         1212          541  .gitignore
2024-12-04 05:02:44 .....         3715         1670  .golangci.yml
2024-12-04 05:02:44 .....         3103          929  .goreleaser.yml
2024-12-04 05:02:44 .....           92           75  .ko.yaml
2024-12-04 05:02:44 .....          247          204  .slsa-goreleaser.yml
2024-12-04 05:02:44 .....        11680         4690  CHARTER.md
2024-12-04 05:02:44 .....        86593        83714  CHARTER.pdf
2024-12-04 05:02:44 .....         5221         2223  CODE_OF_CONDUCT.md
2024-12-04 05:02:44 .....         9618         4094  CONTRIBUTING.md
2024-12-04 05:02:44 .....         7129         2974  CONTRIBUTOR_LADDER.md
2024-12-04 05:02:44 .....         1018          658  Dockerfile
2024-12-04 05:02:44 .....        11355         4437  LICENSE
2024-12-04 05:02:44 .....         1434          482  MAINTAINERS.md
2024-12-04 05:02:44 .....        21398         5228  Makefile
2024-12-04 05:02:44 .....        44586        12963  README.md
2024-12-04 05:02:44 .....         4820         2156  RELEASE.md
2024-12-04 05:02:44 .....         2509         1158  SECURITY.md
2024-12-04 05:02:44 .....       201327       196443  artwork/openssf_security.png
2024-12-04 05:02:44 .....        42563        18051  artwork/openssf_security.svg
2024-12-04 05:02:44 .....       210347       205338  artwork/openssf_security_alt.png
2024-12-04 05:02:44 .....        34537        14807  artwork/openssf_security_alt.svg
2024-12-04 05:02:44 .....       134786       128754  artwork/openssf_security_alt_compressed.png
2024-12-04 05:02:44 .....       126477       121040  artwork/openssf_security_compressed.png
2024-12-04 05:02:44 .....          988          634  attestor/Dockerfile
2024-12-04 05:02:44 .....         4172         1733  attestor/README.md
2024-12-04 05:02:44 .....          980          547  attestor/cloudbuild.yaml
2024-12-04 05:02:44 .....         3525         1432  attestor/command/check.go
2024-12-04 05:02:44 .....         4036         1613  attestor/command/cli.go
2024-12-04 05:02:44 .....         2207          742  attestor/command/cli_test.go
2024-12-04 05:02:44 .....         3824         1527  attestor/command/sign.go
2024-12-04 05:02:44 .....         9183         3066  attestor/policy/attestation_policy.go
2024-12-04 05:02:44 .....        18191         3451  attestor/policy/attestation_policy_test.go
2024-12-04 05:02:44 .....         1795          825  attestor/policy/testdata/policy-binauthz-allowlist.yaml
2024-12-04 05:02:44 .....         1761          828  attestor/policy/testdata/policy-binauthz-invalid.yaml
2024-12-04 05:02:44 .....          725          445  attestor/policy/testdata/policy-binauthz-missingparam.yaml
2024-12-04 05:02:44 .....         1712          790  attestor/policy/testdata/policy-binauthz.yaml
2024-12-04 05:02:44 .....          704          447  attestor/root.go
2024-12-04 05:02:44 .....         2060          994  checker/check_request.go
2024-12-04 05:02:44 .....         2567          898  checker/check_request_test.go
2024-12-04 05:02:44 .....         8883         3345  checker/check_result.go
2024-12-04 05:02:44 .....        18252         3179  checker/check_result_test.go
2024-12-04 05:02:44 .....         3711         1574  checker/check_runner.go
2024-12-04 05:02:44 .....         3135         1253  checker/client.go
2024-12-04 05:02:44 .....         3841         1260  checker/client_test.go
2024-12-04 05:02:44 .....          851          509  checker/detail_logger.go
2024-12-04 05:02:44 .....         1562          705  checker/detail_logger_impl.go
2024-12-04 05:02:44 .....         2007          692  checker/detail_logger_impl_test.go
2024-12-04 05:02:44 .....        14279         4638  checker/raw_result.go
2024-12-04 05:02:44 .....         1408          699  checker/raw_result_test.go
2024-12-04 05:02:44 .....         2132         1018  checks/all_checks.go
2024-12-04 05:02:44 .....         1670          802  checks/all_checks_test.go
2024-12-04 05:02:44 .....         2101          915  checks/binary_artifact.go
2024-12-04 05:02:44 .....         2589         1226  checks/binary_artifact_test.go
2024-12-04 05:02:44 .....         2008          862  checks/branch_protection.go
2024-12-04 05:02:44 .....        12772         2522  checks/branch_protection_test.go
2024-12-04 05:02:44 .....         1817          831  checks/ci_tests.go
2024-12-04 05:02:44 .....         1225          701  checks/ci_tests_test.go
2024-12-04 05:02:44 .....         2029          885  checks/cii_best_practices.go
2024-12-04 05:02:44 .....         3130         1228  checks/cii_best_practices_test.go
2024-12-04 05:02:44 .....         2039          923  checks/code_review.go
2024-12-04 05:02:44 .....         5932         1625  checks/code_review_test.go
2024-12-04 05:02:44 .....         1933          843  checks/contributors.go
2024-12-04 05:02:44 .....         3999         1280  checks/contributors_test.go
2024-12-04 05:02:44 .....         2128          915  checks/dangerous_workflow.go
2024-12-04 05:02:44 .....         2865         1186  checks/dangerous_workflow_test.go
2024-12-04 05:02:44 .....         2190          935  checks/dependency_update_tool.go
2024-12-04 05:02:44 .....         4998         1473  checks/dependency_update_tool_test.go
2024-12-04 05:02:44 .....          793          478  checks/errors.go
2024-12-04 05:02:44 .....         2020         1012  checks/evaluation/binary_artifacts.go
2024-12-04 05:02:44 .....         3325         1107  checks/evaluation/binary_artifacts_test.go
2024-12-04 05:02:44 .....        14653         3878  checks/evaluation/branch_protection.go
2024-12-04 05:02:44 .....        20667         2496  checks/evaluation/branch_protection_test.go
2024-12-04 05:02:44 .....         2511         1079  checks/evaluation/ci_tests.go
2024-12-04 05:02:44 .....         3156          986  checks/evaluation/ci_tests_test.go
2024-12-04 05:02:44 .....         2675         1140  checks/evaluation/cii_best_practices.go
2024-12-04 05:02:44 .....         3505          977  checks/evaluation/cii_best_practices_test.go
2024-12-04 05:02:44 .....         2428         1042  checks/evaluation/code_review.go
2024-12-04 05:02:44 .....         2672         1086  checks/evaluation/code_review_test.go
2024-12-04 05:02:44 .....         2299         1044  checks/evaluation/contributors.go
2024-12-04 05:02:44 .....         2194          846  checks/evaluation/contributors_test.go
2024-12-04 05:02:44 .....         2915         1052  checks/evaluation/dangerous_workflow.go
2024-12-04 05:02:44 .....         6823         1220  checks/evaluation/dangerous_workflow_test.go
2024-12-04 05:02:44 .....         1829          889  checks/evaluation/dependency_update_tool.go
2024-12-04 05:02:44 .....         2587         1039  checks/evaluation/dependency_update_tool_test.go
2024-12-04 05:02:44 .....         1824          901  checks/evaluation/fuzzing.go
2024-12-04 05:02:44 .....         2556         1055  checks/evaluation/fuzzing_test.go
2024-12-04 05:02:44 .....         2385         1032  checks/evaluation/license.go
2024-12-04 05:02:44 .....         2967         1011  checks/evaluation/license_test.go
2024-12-04 05:02:44 .....         3497         1394  checks/evaluation/maintained.go
2024-12-04 05:02:44 .....         4304         1175  checks/evaluation/maintained_test.go
2024-12-04 05:02:44 .....         2012          972  checks/evaluation/packaging.go
2024-12-04 05:02:44 .....         2297          890  checks/evaluation/packaging_test.go
2024-12-04 05:02:44 .....         9599         2685  checks/evaluation/permissions.go
2024-12-04 05:02:44 .....         7105         2565  checks/evaluation/pinned_dependencies.go
2024-12-04 05:02:44 .....        19360         3326  checks/evaluation/pinned_dependencies_test.go
2024-12-04 05:02:44 .....         5900         2050  checks/evaluation/sast.go
2024-12-04 05:02:44 .....         4804         1315  checks/evaluation/sast_test.go
2024-12-04 05:02:44 .....         2213         1031  checks/evaluation/sbom.go
2024-12-04 05:02:44 .....         2207          879  checks/evaluation/sbom_test.go
2024-12-04 05:02:44 .....         3133         1231  checks/evaluation/security_policy.go
2024-12-04 05:02:44 .....         4753         1092  checks/evaluation/security_policy_test.go
2024-12-04 05:02:44 .....         5327         2109  checks/evaluation/signed_releases.go
2024-12-04 05:02:44 .....         7983         1885  checks/evaluation/signed_releases_test.go
2024-12-04 05:02:44 .....         1701          863  checks/evaluation/vulnerabilities.go
2024-12-04 05:02:44 .....         2412         1046  checks/evaluation/vulnerabilities_test.go
2024-12-04 05:02:44 .....         2147          977  checks/evaluation/webhooks.go
2024-12-04 05:02:44 .....         5138          993  checks/evaluation/webhooks_test.go
2024-12-04 05:02:44 .....          783          477  checks/fileparser/errors.go
2024-12-04 05:02:44 .....        16061         5161  checks/fileparser/github_workflow.go
2024-12-04 05:02:44 .....        23212         3663  checks/fileparser/github_workflow_test.go
2024-12-04 05:02:44 .....          860          528  checks/fileparser/gitlab_workflow.go
2024-12-04 05:02:44 .....         6769         2392  checks/fileparser/listing.go
2024-12-04 05:02:44 .....        14945         3043  checks/fileparser/listing_test.go
2024-12-04 05:02:44 .....         1945          879  checks/fuzzing.go
2024-12-04 05:02:44 .....         4292         1543  checks/fuzzing_test.go
2024-12-04 05:02:44 .....         1935          866  checks/license.go
2024-12-04 05:02:44 .....         3090         1447  checks/license_test.go
2024-12-04 05:02:44 .....         1906          845  checks/maintained.go
2024-12-04 05:02:44 .....         9413         2147  checks/maintained_test.go
2024-12-04 05:02:44 .....         2845         1139  checks/packaging.go
2024-12-04 05:02:44 .....         2128          908  checks/permissions.go
2024-12-04 05:02:44 .....        16066         2651  checks/permissions_test.go
2024-12-04 05:02:44 .....         2168          936  checks/pinned_dependencies.go
2024-12-04 05:02:44 .....         2048         1030  checks/pinned_dependencies_test.go
2024-12-04 05:02:44 .....          960          553  checks/probes.go
2024-12-04 05:02:44 .....         7871         3047  checks/raw/binary_artifact.go
2024-12-04 05:02:44 .....         8023         2043  checks/raw/binary_artifact_test.go
2024-12-04 05:02:44 .....         4581         1900  checks/raw/branch_protection.go
2024-12-04 05:02:44 .....         6372         1772  checks/raw/branch_protection_test.go
2024-12-04 05:02:44 .....         2386         1067  checks/raw/ci_tests.go
2024-12-04 05:02:44 .....         1194          655  checks/raw/cii_best_practices.go
2024-12-04 05:02:44 .....         5019         1820  checks/raw/code_review.go
2024-12-04 05:02:44 .....        11442         2032  checks/raw/code_review_test.go
2024-12-04 05:02:44 .....         2270          971  checks/raw/contributors.go
2024-12-04 05:02:44 .....         3920         1326  checks/raw/contributors_test.go
2024-12-04 05:02:44 .....         7456         2698  checks/raw/dangerous_workflow.go
2024-12-04 05:02:44 .....         4933         1560  checks/raw/dangerous_workflow_test.go
2024-12-04 05:02:44 .....         4870         1748  checks/raw/dependency_update_tool.go
2024-12-04 05:02:44 .....         6113         1569  checks/raw/dependency_update_tool_test.go
2024-12-04 05:02:44 .....          973          528  checks/raw/errors.go
2024-12-04 05:02:44 .....        12612         4403  checks/raw/fuzzing.go
2024-12-04 05:02:44 .....        16874         3555  checks/raw/fuzzing_test.go
2024-12-04 05:02:44 .....         3294         1381  checks/raw/github/packaging.go
2024-12-04 05:02:44 .....         2308         1108  checks/raw/gitlab/packaging.go
2024-12-04 05:02:44 .....         4246         1566  checks/raw/gitlab/packaging_test.go
2024-12-04 05:02:44 .....         1554          734  checks/raw/gitlab/testdata/docker.yaml
2024-12-04 05:02:44 .....         1551          731  checks/raw/gitlab/testdata/no-publishing.yaml
2024-12-04 05:02:44 .....         1536          773  checks/raw/gitlab/testdata/nuget.yaml
2024-12-04 05:02:44 .....         1749          845  checks/raw/gitlab/testdata/poetry.yaml
2024-12-04 05:02:44 .....         1488          732  checks/raw/gitlab/testdata/twine.yaml
2024-12-04 05:02:44 .....        29340         8787  checks/raw/license.go
2024-12-04 05:02:44 .....        12733         2155  checks/raw/license_test.go
2024-12-04 05:02:44 .....         1459          684  checks/raw/maintained.go
2024-12-04 05:02:44 .....         3738         1212  checks/raw/maintained_test.go
2024-12-04 05:02:44 .....        17556         4983  checks/raw/permissions.go
2024-12-04 05:02:44 .....        22020         6298  checks/raw/pinned_dependencies.go
2024-12-04 05:02:44 .....        65657        10645  checks/raw/pinned_dependencies_test.go
2024-12-04 05:02:44 .....         9005         3260  checks/raw/sast.go
2024-12-04 05:02:44 .....         5718         1521  checks/raw/sast_test.go
2024-12-04 05:02:44 .....         2624         1198  checks/raw/sbom.go
2024-12-04 05:02:44 .....         3179         1367  checks/raw/sbom_test.go
2024-12-04 05:02:44 .....         8982         2942  checks/raw/security_policy.go
2024-12-04 05:02:44 .....         4079         1558  checks/raw/security_policy_test.go
2024-12-04 05:02:44 .....        33421        10278  checks/raw/shell_download_validate.go
2024-12-04 05:02:44 .....        12813         2394  checks/raw/shell_download_validate_test.go
2024-12-04 05:02:44 .....         1809          885  checks/raw/signed_releases.go
2024-12-04 05:02:44 .....         4287         1598  checks/raw/testdata/.github/workflows/airflows-codeql.yaml
2024-12-04 05:02:44 .....          357          205  checks/raw/testdata/.github/workflows/github-pysa-workflow.yaml
2024-12-04 05:02:44 .....          519          292  checks/raw/testdata/.github/workflows/github-qodana-workflow.yaml
2024-12-04 05:02:44 .....          611          389  checks/raw/testdata/.github/workflows/github-workflow-comments.yaml
2024-12-04 05:02:44 .....         2163         1104  checks/raw/testdata/.github/workflows/github-workflow-curl-default.yaml
2024-12-04 05:02:44 .....         2114         1084  checks/raw/testdata/.github/workflows/github-workflow-curl-no-default.yaml
2024-12-04 05:02:44 .....         1262          582  checks/raw/testdata/.github/workflows/github-workflow-download-lines.yaml
2024-12-04 05:02:44 .....            0            0  checks/raw/testdata/.github/workflows/github-workflow-empty.yaml
2024-12-04 05:02:44 .....         1011          636  checks/raw/testdata/.github/workflows/github-workflow-matrix-expression.yaml
2024-12-04 05:02:44 .....          847          527  checks/raw/testdata/.github/workflows/github-workflow-multiple-unpinned-uses.yaml
2024-12-04 05:02:44 .....         7495         1427  checks/raw/testdata/.github/workflows/github-workflow-pkg-managers.yaml
2024-12-04 05:02:44 .....          375          215  checks/raw/testdata/.github/workflows/github-workflow-snyk.yaml
2024-12-04 05:02:44 .....         1309          348  checks/raw/testdata/.github/workflows/github-workflow-unknown-os.yaml
2024-12-04 05:02:44 .....         2033         1055  checks/raw/testdata/.github/workflows/github-workflow-wget-across-steps.yaml
2024-12-04 05:02:44 .....          283          143  checks/raw/testdata/.github/workflows/pom.xml
2024-12-04 05:02:44 .....         1220          694  checks/raw/testdata/.github/workflows/workflow-local-action.yaml
2024-12-04 05:02:44 .....         1021          593  checks/raw/testdata/.github/workflows/workflow-mix-github-and-non-github-not-pinned.yaml
2024-12-04 05:02:44 .....         1082          617  checks/raw/testdata/.github/workflows/workflow-mix-github-and-non-github-pinned.yaml
2024-12-04 05:02:44 .....         1499          798  checks/raw/testdata/.github/workflows/workflow-mix-pinned-and-non-pinned-github.yaml
2024-12-04 05:02:44 .....         1151          633  checks/raw/testdata/.github/workflows/workflow-mix-pinned-and-non-pinned-non-github.yaml
2024-12-04 05:02:44 .....         1366          757  checks/raw/testdata/.github/workflows/workflow-non-github-pinned.yaml
2024-12-04 05:02:44 .....         3001         1485  checks/raw/testdata/.github/workflows/workflow-not-pinned.yaml
2024-12-04 05:02:44 .....         3119         1554  checks/raw/testdata/.github/workflows/workflow-pinned.yaml
2024-12-04 05:02:44 .....          694          440  checks/raw/testdata/Dockerfile-args
2024-12-04 05:02:44 .....         2300          756  checks/raw/testdata/Dockerfile-aws-file
2024-12-04 05:02:44 .....           68           45  checks/raw/testdata/Dockerfile-base
2024-12-04 05:02:44 .....          719          444  checks/raw/testdata/Dockerfile-comments
2024-12-04 05:02:44 .....         1435          657  checks/raw/testdata/Dockerfile-curl-file-sh
2024-12-04 05:02:44 .....         1289          681  checks/raw/testdata/Dockerfile-curl-sh
2024-12-04 05:02:44 .....         1780          735  checks/raw/testdata/Dockerfile-download-heredoc
2024-12-04 05:02:44 .....         4293         1370  checks/raw/testdata/Dockerfile-download-lines
2024-12-04 05:02:44 .....         1260          751  checks/raw/testdata/Dockerfile-download-multi-runs
2024-12-04 05:02:44 .....            0            0  checks/raw/testdata/Dockerfile-empty
2024-12-04 05:02:44 .....          706          455  checks/raw/testdata/Dockerfile-empty-run-array
2024-12-04 05:02:44 .....         1758          710  checks/raw/testdata/Dockerfile-gsutil-file
2024-12-04 05:02:44 .....         1439          886  checks/raw/testdata/Dockerfile-invalid
2024-12-04 05:02:44 .....          815          492  checks/raw/testdata/Dockerfile-no-curl-sh
2024-12-04 05:02:44 .....          791          528  checks/raw/testdata/Dockerfile-no-curl-sh-with-parser-error
2024-12-04 05:02:44 .....         1469          908  checks/raw/testdata/Dockerfile-not-pinned
2024-12-04 05:02:44 .....          955          557  checks/raw/testdata/Dockerfile-not-pinned-as
2024-12-04 05:02:44 .....          203          145  checks/raw/testdata/Dockerfile-not-pinned-with-parser-error
2024-12-04 05:02:44 .....         1240          822  checks/raw/testdata/Dockerfile-pinned
2024-12-04 05:02:44 .....         1027          616  checks/raw/testdata/Dockerfile-pinned-as
2024-12-04 05:02:44 .....          902          559  checks/raw/testdata/Dockerfile-pinned-as-without-hash
2024-12-04 05:02:44 .....         6481         1401  checks/raw/testdata/Dockerfile-pkg-managers
2024-12-04 05:02:44 .....         1508          677  checks/raw/testdata/Dockerfile-proc-subs
2024-12-04 05:02:44 .....         2612         1008  checks/raw/testdata/Dockerfile-script-ok
2024-12-04 05:02:44 .....         1758          810  checks/raw/testdata/Dockerfile-some-python
2024-12-04 05:02:44 .....         1272          671  checks/raw/testdata/Dockerfile-wget-bin-sh
2024-12-04 05:02:44 .....         1384          643  checks/raw/testdata/Dockerfile-wget-file
2024-12-04 05:02:44 .....            0            0  checks/raw/testdata/dotnet-empty.csproj
2024-12-04 05:02:44 .....            9           11  checks/raw/testdata/dotnet-invalid.csproj
2024-12-04 05:02:44 .....          136          100  checks/raw/testdata/dotnet-locked-mode-disabled-implicitly.csproj
2024-12-04 05:02:44 .....          223          129  checks/raw/testdata/dotnet-locked-mode-disabled.csproj
2024-12-04 05:02:44 .....          222          128  checks/raw/testdata/dotnet-locked-mode-enabled.csproj
2024-12-04 05:02:44 .....         1922          967  checks/raw/testdata/script-bash
2024-12-04 05:02:44 .....          643          405  checks/raw/testdata/script-comments.sh
2024-12-04 05:02:44 .....            0            0  checks/raw/testdata/script-empty.sh
2024-12-04 05:02:44 .....         1002          623  checks/raw/testdata/script-free-from-download.sh
2024-12-04 05:02:44 .....          675          429  checks/raw/testdata/script-invalid.sh
2024-12-04 05:02:44 .....         5619         1274  checks/raw/testdata/script-pkg-managers
2024-12-04 05:02:44 .....         3738          872  checks/raw/testdata/shell-download-lines.sh
2024-12-04 05:02:44 .....          634          414  checks/raw/testdata/shell_file_awk_shebang.sh
2024-12-04 05:02:44 .....          615          395  checks/raw/testdata/shell_file_bash_shebang1.sh
2024-12-04 05:02:44 .....          619          398  checks/raw/testdata/shell_file_bash_shebang2.sh
2024-12-04 05:02:44 .....          619          397  checks/raw/testdata/shell_file_bash_shebang3.sh
2024-12-04 05:02:44 .....          615          396  checks/raw/testdata/shell_file_mksh_shebang.sh
2024-12-04 05:02:44 .....          603          385  checks/raw/testdata/shell_file_no_shebang.sh
2024-12-04 05:02:44 .....          611          392  checks/raw/testdata/shell_file_sh_shebang.sh
2024-12-04 05:02:44 .....          613          395  checks/raw/testdata/shell_file_zsh_shebang.sh
2024-12-04 05:02:44 .....          955          557  checks/raw/testdata/vendor/Dockerfile-not-pinned-as
2024-12-04 05:02:44 .....         1822          840  checks/raw/vulnerabilities.go
2024-12-04 05:02:44 .....         3534         1380  checks/raw/vulnerabilities_test.go
2024-12-04 05:02:44 .....         1084          614  checks/raw/webhook.go
2024-12-04 05:02:44 .....         3346         1298  checks/raw/webhooks_test.go
2024-12-04 05:02:44 .....         1898          873  checks/sast.go
2024-12-04 05:02:44 .....         8805         2043  checks/sast_test.go
2024-12-04 05:02:44 .....         2135          955  checks/sbom.go
2024-12-04 05:02:44 .....         2920         1323  checks/sbom_test.go
2024-12-04 05:02:44 .....         2083          905  checks/security_policy.go
2024-12-04 05:02:44 .....         4336         1330  checks/security_policy_test.go
2024-12-04 05:02:44 .....         1961          859  checks/signed_releases.go
2024-12-04 05:02:44 .....        13135         2194  checks/signed_releases_test.go
2024-12-04 05:02:44 .....         4287         1598  checks/testdata/.github/workflows/airflow-codeql-workflow.yaml
2024-12-04 05:02:44 .....         1029          585  checks/testdata/.github/workflows/github-workflow-dangerous-pattern-default-checkout.yml
2024-12-04 05:02:44 .....         1022          579  checks/testdata/.github/workflows/github-workflow-dangerous-pattern-safe-trigger.yml
2024-12-04 05:02:44 .....         1032          583  checks/testdata/.github/workflows/github-workflow-dangerous-pattern-trusted-checkout.yml
2024-12-04 05:02:44 .....          870          522  checks/testdata/.github/workflows/github-workflow-dangerous-pattern-trusted-script-injection.yml
2024-12-04 05:02:44 .....         1072          603  checks/testdata/.github/workflows/github-workflow-dangerous-pattern-untrusted-checkout-workflow_run.yml
2024-12-04 05:02:44 .....         1061          597  checks/testdata/.github/workflows/github-workflow-dangerous-pattern-untrusted-checkout.yml
2024-12-04 05:02:44 .....          987          587  checks/testdata/.github/workflows/github-workflow-dangerous-pattern-untrusted-inline-script-injection.yml
2024-12-04 05:02:44 .....         1025          600  checks/testdata/.github/workflows/github-workflow-dangerous-pattern-untrusted-multiple-script-injection.yml
2024-12-04 05:02:44 .....          977          586  checks/testdata/.github/workflows/github-workflow-dangerous-pattern-untrusted-script-injection-wildcard.yml
2024-12-04 05:02:44 .....          979          582  checks/testdata/.github/workflows/github-workflow-dangerous-pattern-untrusted-script-injection.yml
2024-12-04 05:02:44 .....          707          445  checks/testdata/.github/workflows/github-workflow-packaging-cargo.yaml
2024-12-04 05:02:44 .....          789          481  checks/testdata/.github/workflows/github-workflow-packaging-docker-action.yaml
2024-12-04 05:02:44 .....          726          458  checks/testdata/.github/workflows/github-workflow-packaging-docker-push.yaml
2024-12-04 05:02:44 .....          708          448  checks/testdata/.github/workflows/github-workflow-packaging-gem.yaml
2024-12-04 05:02:44 .....         1013          559  checks/testdata/.github/workflows/github-workflow-packaging-go.yaml
2024-12-04 05:02:44 .....          744          459  checks/testdata/.github/workflows/github-workflow-packaging-gradle.yaml
2024-12-04 05:02:44 .....          772          474  checks/testdata/.github/workflows/github-workflow-packaging-maven-multi-line.yaml
2024-12-04 05:02:44 .....          740          460  checks/testdata/.github/workflows/github-workflow-packaging-maven.yaml
2024-12-04 05:02:44 .....          876          534  checks/testdata/.github/workflows/github-workflow-packaging-npm-github.yaml
2024-12-04 05:02:44 .....         1126          596  checks/testdata/.github/workflows/github-workflow-packaging-npm.yaml
2024-12-04 05:02:44 .....          804          523  checks/testdata/.github/workflows/github-workflow-packaging-nuget.yaml
2024-12-04 05:02:44 .....          762          470  checks/testdata/.github/workflows/github-workflow-packaging-pypi-failing.yaml
2024-12-04 05:02:44 .....          828          519  checks/testdata/.github/workflows/github-workflow-packaging-pypi-minimal.yaml
2024-12-04 05:02:44 .....          910          547  checks/testdata/.github/workflows/github-workflow-packaging-pypi.yaml
2024-12-04 05:02:44 .....          896          550  checks/testdata/.github/workflows/github-workflow-packaging-python-semantic-release.yaml
2024-12-04 05:02:44 .....          510          274  checks/testdata/.github/workflows/github-workflow-packaging-sbt-ci-release.yaml
2024-12-04 05:02:44 .....          882          517  checks/testdata/.github/workflows/github-workflow-packaging-semantic-release.yaml
2024-12-04 05:02:44 .....          729          459  checks/testdata/.github/workflows/github-workflow-permissions-absent.yaml
2024-12-04 05:02:44 .....          809          496  checks/testdata/.github/workflows/github-workflow-permissions-actions.yaml
2024-12-04 05:02:44 .....          869          520  checks/testdata/.github/workflows/github-workflow-permissions-contents-writes-no-release.yaml
2024-12-04 05:02:44 .....         1649          890  checks/testdata/.github/workflows/github-workflow-permissions-contents-writes-release-mvn-release.yaml
2024-12-04 05:02:44 .....          965          551  checks/testdata/.github/workflows/github-workflow-permissions-contents-writes-release-semantic-release-pnpm.yaml
2024-12-04 05:02:44 .....          966          553  checks/testdata/.github/workflows/github-workflow-permissions-contents-writes-release-semantic-release-yarn.yaml
2024-12-04 05:02:44 .....          986          558  checks/testdata/.github/workflows/github-workflow-permissions-contents-writes-release-semantic-release.yaml
2024-12-04 05:02:44 .....          972          562  checks/testdata/.github/workflows/github-workflow-permissions-contents-writes-release.yaml
2024-12-04 05:02:44 .....          809          496  checks/testdata/.github/workflows/github-workflow-permissions-contents.yaml
2024-12-04 05:02:44 .....          851          517  checks/testdata/.github/workflows/github-workflow-permissions-gh-pages.yaml
2024-12-04 05:02:44 .....         1008          490  checks/testdata/.github/workflows/github-workflow-permissions-jobs-only.yaml
2024-12-04 05:02:44 .....          739          462  checks/testdata/.github/workflows/github-workflow-permissions-none.yaml
2024-12-04 05:02:44 .....          931          538  checks/testdata/.github/workflows/github-workflow-permissions-nones.yaml
2024-12-04 05:02:44 .....          869          523  checks/testdata/.github/workflows/github-workflow-permissions-packages-writes.yaml
2024-12-04 05:02:44 .....          792          486  checks/testdata/.github/workflows/github-workflow-permissions-packages.yaml
2024-12-04 05:02:44 .....          755          468  checks/testdata/.github/workflows/github-workflow-permissions-readall.yaml
2024-12-04 05:02:44 .....          931          535  checks/testdata/.github/workflows/github-workflow-permissions-reads.yaml
2024-12-04 05:02:44 .....          897          543  checks/testdata/.github/workflows/github-workflow-permissions-run-codeql-write.yaml
2024-12-04 05:02:44 .....          752          473  checks/testdata/.github/workflows/github-workflow-permissions-run-level-only.yaml
2024-12-04 05:02:44 .....          946          533  checks/testdata/.github/workflows/github-workflow-permissions-run-multiple-writes.yaml
2024-12-04 05:02:44 .....          896          543  checks/testdata/.github/workflows/github-workflow-permissions-run-no-codeql-write.yaml
2024-12-04 05:02:44 .....          831          512  checks/testdata/.github/workflows/github-workflow-permissions-run-package-workflow-write.yaml
2024-12-04 05:02:44 .....          831          500  checks/testdata/.github/workflows/github-workflow-permissions-run-package-write.yaml
2024-12-04 05:02:44 .....          957          565  checks/testdata/.github/workflows/github-workflow-permissions-run-write-codeql-comment.yaml
2024-12-04 05:02:44 .....          879          512  checks/testdata/.github/workflows/github-workflow-permissions-run-writes-2.yaml
2024-12-04 05:02:44 .....          811          493  checks/testdata/.github/workflows/github-workflow-permissions-run-writes.yaml
2024-12-04 05:02:44 .....          859          514  checks/testdata/.github/workflows/github-workflow-permissions-secevent-deployments.yaml
2024-12-04 05:02:44 .....         1394          627  checks/testdata/.github/workflows/github-workflow-permissions-secevent-known-actions.yaml
2024-12-04 05:02:44 .....          842          506  checks/testdata/.github/workflows/github-workflow-permissions-status-checks.yaml
2024-12-04 05:02:44 .....          748          473  checks/testdata/.github/workflows/github-workflow-permissions-top-level-only.yaml
2024-12-04 05:02:44 .....          758          468  checks/testdata/.github/workflows/github-workflow-permissions-writeall.yaml
2024-12-04 05:02:44 .....          798          492  checks/testdata/.github/workflows/github-workflow-permissions-writes.yaml
2024-12-04 05:02:44 .....          847          527  checks/testdata/.github/workflows/github-workflow-sast-codeql.yaml
2024-12-04 05:02:44 .....         1021          593  checks/testdata/.github/workflows/github-workflow-sast-no-codeql.yaml
2024-12-04 05:02:44 .....          714          453  checks/testdata/.github/workflows/github-workflow-shells-all-windows-bash.yaml
2024-12-04 05:02:44 .....          768          483  checks/testdata/.github/workflows/github-workflow-shells-all-windows-matrix-include-empty.yaml
2024-12-04 05:02:44 .....          849          508  checks/testdata/.github/workflows/github-workflow-shells-all-windows-matrix-include.yaml
2024-12-04 05:02:44 .....          751          474  checks/testdata/.github/workflows/github-workflow-shells-all-windows-matrix.yaml
2024-12-04 05:02:44 .....          694          443  checks/testdata/.github/workflows/github-workflow-shells-all-windows.yaml
2024-12-04 05:02:44 .....          676          429  checks/testdata/.github/workflows/github-workflow-shells-default-macos.yaml
2024-12-04 05:02:44 .....          677          429  checks/testdata/.github/workflows/github-workflow-shells-default-ubuntu.yaml
2024-12-04 05:02:44 .....          678          430  checks/testdata/.github/workflows/github-workflow-shells-default-windows.yaml
2024-12-04 05:02:44 .....         1634          640  checks/testdata/.github/workflows/github-workflow-shells-runner-windows-ubuntu.yaml
2024-12-04 05:02:44 .....          742          454  checks/testdata/.github/workflows/github-workflow-shells-specified-job-step.yaml
2024-12-04 05:02:44 .....          758          469  checks/testdata/.github/workflows/github-workflow-shells-specified-job-windows.yaml
2024-12-04 05:02:44 .....          722          448  checks/testdata/.github/workflows/github-workflow-shells-specified-job.yaml
2024-12-04 05:02:44 .....          697          439  checks/testdata/.github/workflows/github-workflow-shells-specified-step.yaml
2024-12-04 05:02:44 .....          732          445  checks/testdata/.github/workflows/github-workflow-shells-two-shells.yaml
2024-12-04 05:02:44 .....          785          478  checks/testdata/.github/workflows/github-workflow-shells-windows-bash.yaml
2024-12-04 05:02:44 .....          934          589  checks/testdata/Dockerfile-pinned-without-hash
2024-12-04 05:02:44 .....      1893362      1116157  checks/testdata/binaryartifacts/executables/darwin-arm64-bt
2024-12-04 05:02:46 .....       945624       835058  checks/testdata/binaryartifacts/jars/aws-java-sdk-core-1.11.571.jar
2024-12-04 05:02:46 .....        55616        50235  checks/testdata/binaryartifacts/jars/gradle-wrapper.jar
2024-12-04 05:02:46 .....        14885         5241  checks/testdata/binaryartifacts/printable.lib
2024-12-04 05:02:46 .....           78           67  checks/testdata/binaryartifacts/wasms/simple.wasm
2024-12-04 05:02:46 .....          308          202  checks/testdata/binaryartifacts/workflows/invalid.yaml
2024-12-04 05:02:46 .....          318          214  checks/testdata/binaryartifacts/workflows/nonverify.yaml
2024-12-04 05:02:46 .....          258          166  checks/testdata/binaryartifacts/workflows/verify-new-gradle-name.yaml
2024-12-04 05:02:46 .....          257          166  checks/testdata/binaryartifacts/workflows/verify.yaml
2024-12-04 05:02:46 .....            0            0  checks/testdata/licensedir/withlicense/LICENSE
2024-12-04 05:02:46 .....            0            0  checks/testdata/licensedir/withoutlicense/README.md
2024-12-04 05:02:46 .....          283          143  checks/testdata/pom-1line.xml
2024-12-04 05:02:46 .....          289          148  checks/testdata/pom-2lines.xml
2024-12-04 05:02:46 .....         1246          741  checks/testdata/script-sh
2024-12-04 05:02:46 .....         1232          726  checks/testdata/script.sh
2024-12-04 05:02:46 .....            1            3  checks/testdata/securitypolicy/00_1byte
2024-12-04 05:02:46 .....            0            0  checks/testdata/securitypolicy/00_empty
2024-12-04 05:02:46 .....           69           60  checks/testdata/securitypolicy/03_securitypolicy
2024-12-04 05:02:46 .....           33           35  checks/testdata/securitypolicy/03_textOnly
2024-12-04 05:02:46 .....           69           60  checks/testdata/securitypolicy/04_textAndDisclosureVulns
2024-12-04 05:02:46 .....           21           23  checks/testdata/securitypolicy/06_emailOnly
2024-12-04 05:02:46 .....           50           37  checks/testdata/securitypolicy/06_urlAndEmailOnly
2024-12-04 05:02:46 .....           29           31  checks/testdata/securitypolicy/06_urlOnly
2024-12-04 05:02:46 .....           83           70  checks/testdata/securitypolicy/09_linkedContentAndText
2024-12-04 05:02:46 .....          119           92  checks/testdata/securitypolicy/10_linkedContentAndTextAndDisclosureVulns
2024-12-04 05:02:46 .....         1069          427  checks/testdata/securitypolicy/10_realworld
2024-12-04 05:02:46 .....          539          316  checks/testdata/securitypolicy/10_realworldtwo
2024-12-04 05:02:46 .....         2061          892  checks/vulnerabilities.go
2024-12-04 05:02:46 .....         2365         1110  checks/vulnerabilities_test.go
2024-12-04 05:02:46 .....         2297         1012  checks/webhook.go
2024-12-04 05:02:46 .....         3143         1270  checks/webhook_test.go
2024-12-04 05:02:46 .....         4200         1894  checks/write.md
2024-12-04 05:02:46 .....         2255         1095  clients/azuredevopsrepo/audit.go
2024-12-04 05:02:46 .....         2521         1179  clients/azuredevopsrepo/audit_test.go
2024-12-04 05:02:46 .....         2075          947  clients/azuredevopsrepo/branches.go
2024-12-04 05:02:46 .....         2062          968  clients/azuredevopsrepo/branches_test.go
2024-12-04 05:02:46 .....         6823         2255  clients/azuredevopsrepo/client.go
2024-12-04 05:02:46 .....         1592          811  clients/azuredevopsrepo/client_test.go
2024-12-04 05:02:46 .....         6519         2140  clients/azuredevopsrepo/commits.go
2024-12-04 05:02:46 .....         3388         1423  clients/azuredevopsrepo/repo.go
2024-12-04 05:02:46 .....         4299         1319  clients/azuredevopsrepo/repo_test.go
2024-12-04 05:02:46 .....          699          247  clients/azuredevopsrepo/testdata/basic.zip
2024-12-04 05:02:46 .....         5365         1918  clients/azuredevopsrepo/work_items.go
2024-12-04 05:02:46 .....         6054         1719  clients/azuredevopsrepo/work_items_test.go
2024-12-04 05:02:46 .....         6397         2441  clients/azuredevopsrepo/zip.go
2024-12-04 05:02:46 .....         4977         1912  clients/azuredevopsrepo/zip_test.go
2024-12-04 05:02:46 .....         1610          767  clients/branch.go
2024-12-04 05:02:46 .....          866          499  clients/checkruns.go
2024-12-04 05:02:46 .....         1910          876  clients/cii_blob_client.go
2024-12-04 05:02:46 .....         2125          919  clients/cii_client.go
2024-12-04 05:02:46 .....         2529         1175  clients/cii_http_client.go
2024-12-04 05:02:46 .....         2158          951  clients/cii_response.go
2024-12-04 05:02:46 .....         3536         1167  clients/cii_response_test.go
2024-12-04 05:02:46 .....          855          499  clients/commit.go
2024-12-04 05:02:46 .....        10004         3349  clients/git/client.go
2024-12-04 05:02:46 .....         5529         1933  clients/git/client_test.go
2024-12-04 05:02:46 .....         5862         1401  clients/git/e2e_test.go
2024-12-04 05:02:46 .....         1190          707  clients/git/gitrepo_suite_test.go
2024-12-04 05:02:46 .....        21436         6377  clients/githubrepo/branches.go
2024-12-04 05:02:46 .....         4054         1112  clients/githubrepo/branches_e2e_test.go
2024-12-04 05:02:46 .....        18921         3747  clients/githubrepo/branches_test.go
2024-12-04 05:02:46 .....         6029         2342  clients/githubrepo/checkruns.go
2024-12-04 05:02:46 .....         3076         1115  clients/githubrepo/checkruns_e2e_test.go
2024-12-04 05:02:46 .....          961          592  clients/githubrepo/checkruns_test.go
2024-12-04 05:02:46 .....        11256         3338  clients/githubrepo/client.go
2024-12-04 05:02:46 .....         2879         1214  clients/githubrepo/contributors.go
2024-12-04 05:02:46 .....         1750          872  clients/githubrepo/contributors_e2e_test.go
2024-12-04 05:02:46 .....         1397          627  clients/githubrepo/copy.go
2024-12-04 05:02:46 .....         6513         1555  clients/githubrepo/copy_test.go
2024-12-04 05:02:46 .....         1882          998  clients/githubrepo/githubrepo_suite_test.go
2024-12-04 05:02:46 .....        11784         3986  clients/githubrepo/graphql.go
2024-12-04 05:02:46 .....         5720         1362  clients/githubrepo/graphql_e2e_test.go
2024-12-04 05:02:46 .....         1495          833  clients/githubrepo/graphql_test.go
2024-12-04 05:02:46 .....         2543         1203  clients/githubrepo/internal/fnmatch/fnmatch.go
2024-12-04 05:02:46 .....         1820          888  clients/githubrepo/internal/fnmatch/fnmatch_test.go
2024-12-04 05:02:46 .....         2910         1343  clients/githubrepo/languages.go
2024-12-04 05:02:46 .....         1635          840  clients/githubrepo/languages_e2e_test.go
2024-12-04 05:02:46 .....         3304         1488  clients/githubrepo/licenses.go
2024-12-04 05:02:46 .....         1788          883  clients/githubrepo/licenses_e2e_test.go
2024-12-04 05:02:46 .....         2507         1161  clients/githubrepo/releases.go
2024-12-04 05:02:46 .....         1720          862  clients/githubrepo/releases_e2e_test.go
2024-12-04 05:02:46 .....         3641         1574  clients/githubrepo/repo.go
2024-12-04 05:02:46 .....         3178         1120  clients/githubrepo/repo_test.go
2024-12-04 05:02:46 .....         2085          942  clients/githubrepo/roundtripper/census.go
2024-12-04 05:02:46 .....         3200         1342  clients/githubrepo/roundtripper/rate_limit.go
2024-12-04 05:02:46 .....         3024         1251  clients/githubrepo/roundtripper/rate_limit_test.go
2024-12-04 05:02:46 .....         2572         1186  clients/githubrepo/roundtripper/roundtripper.go
2024-12-04 05:02:46 .....         1747          903  clients/githubrepo/roundtripper/tokens/accessor.go
2024-12-04 05:02:46 .....         2321         1044  clients/githubrepo/roundtripper/tokens/accessor_test.go
2024-12-04 05:02:46 .....         1825          877  clients/githubrepo/roundtripper/tokens/round_robin.go
2024-12-04 05:02:46 .....         1400          774  clients/githubrepo/roundtripper/tokens/round_robin_test.go
2024-12-04 05:02:46 .....         1511          778  clients/githubrepo/roundtripper/tokens/rpc.go
2024-12-04 05:02:46 .....         1464          741  clients/githubrepo/roundtripper/tokens/rpc_client.go
2024-12-04 05:02:46 .....         2108          885  clients/githubrepo/roundtripper/tokens/rpc_test.go
2024-12-04 05:02:46 .....         1207          699  clients/githubrepo/roundtripper/tokens/server/Dockerfile
2024-12-04 05:02:46 .....          904          524  clients/githubrepo/roundtripper/tokens/server/cloudbuild.yaml
2024-12-04 05:02:46 .....         1302          724  clients/githubrepo/roundtripper/tokens/server/main.go
2024-12-04 05:02:46 .....         1853          921  clients/githubrepo/roundtripper/transport.go
2024-12-04 05:02:46 .....         3129         1338  clients/githubrepo/search.go
2024-12-04 05:02:46 .....         2373         1078  clients/githubrepo/searchCommits.go
2024-12-04 05:02:46 .....         2061          943  clients/githubrepo/searchCommits_test.go
2024-12-04 05:02:46 .....         3285         1084  clients/githubrepo/search_test.go
2024-12-04 05:02:46 .....         1651          807  clients/githubrepo/stats/stats.go
2024-12-04 05:02:46 .....         1726          852  clients/githubrepo/statuses.go
2024-12-04 05:02:46 .....         1772          913  clients/githubrepo/statuses_e2e_test.go
2024-12-04 05:02:46 .....         8149         3029  clients/githubrepo/tarball.go
2024-12-04 05:02:46 .....         6554         2565  clients/githubrepo/tarball_test.go
2024-12-04 05:02:46 .....          268          273  clients/githubrepo/testdata/basic.tar.gz
2024-12-04 05:02:46 .....          879          336  clients/githubrepo/testdata/valid-webhook.json
2024-12-04 05:02:46 .....         2280         1088  clients/githubrepo/webhook.go
2024-12-04 05:02:46 .....         2251         1127  clients/githubrepo/webhook_test.go
2024-12-04 05:02:46 .....         2025          980  clients/githubrepo/workflows.go
2024-12-04 05:02:46 .....         7754         2375  clients/gitlabrepo/branches.go
2024-12-04 05:02:46 .....         1338          727  clients/gitlabrepo/branches_e2e_test.go
2024-12-04 05:02:46 .....         3753         1340  clients/gitlabrepo/branches_test.go
2024-12-04 05:02:46 .....         3120         1389  clients/gitlabrepo/checkruns.go
2024-12-04 05:02:46 .....         5050         1501  clients/gitlabrepo/checkruns_test.go
2024-12-04 05:02:46 .....         9646         3146  clients/gitlabrepo/client.go
2024-12-04 05:02:46 .....         2607         1041  clients/gitlabrepo/client_e2e_test.go
2024-12-04 05:02:46 .....         3451         1431  clients/gitlabrepo/client_test.go
2024-12-04 05:02:46 .....         5834         2466  clients/gitlabrepo/commits.go
2024-12-04 05:02:46 .....         1884          989  clients/gitlabrepo/commits_e2e_test.go
2024-12-04 05:02:46 .....         3302         1391  clients/gitlabrepo/commits_test.go
2024-12-04 05:02:46 .....         3833         1527  clients/gitlabrepo/contributors.go
2024-12-04 05:02:46 .....         2024          916  clients/gitlabrepo/contributors_test.go
2024-12-04 05:02:46 .....         1009          610  clients/gitlabrepo/gitlab_suite_test.go
2024-12-04 05:02:46 .....         3872         1653  clients/gitlabrepo/graphql.go
2024-12-04 05:02:46 .....         2282          944  clients/gitlabrepo/graphql_e2e_test.go
2024-12-04 05:02:46 .....         3354         1373  clients/gitlabrepo/issues.go
2024-12-04 05:02:46 .....         3340         1614  clients/gitlabrepo/issues_test.go
2024-12-04 05:02:46 .....         2051         1012  clients/gitlabrepo/languages.go
2024-12-04 05:02:46 .....         2139          904  clients/gitlabrepo/languages_e2e_test.go
2024-12-04 05:02:46 .....         2314         1113  clients/gitlabrepo/licenses.go
2024-12-04 05:02:46 .....         1817          828  clients/gitlabrepo/project.go
2024-12-04 05:02:46 .....         1419          735  clients/gitlabrepo/project_e2e_test.go
2024-12-04 05:02:46 .....         2379         1098  clients/gitlabrepo/releases.go
2024-12-04 05:02:46 .....         1278          693  clients/gitlabrepo/releases_e2e_test.go
2024-12-04 05:02:46 .....         5508         2283  clients/gitlabrepo/repo.go
2024-12-04 05:02:46 .....         6819         2078  clients/gitlabrepo/repo_test.go
2024-12-04 05:02:46 .....         2915         1212  clients/gitlabrepo/search.go
2024-12-04 05:02:46 .....         2709         1218  clients/gitlabrepo/searchCommits.go
2024-12-04 05:02:46 .....         2059          953  clients/gitlabrepo/searchCommits_test.go
2024-12-04 05:02:46 .....         4995         1643  clients/gitlabrepo/search_test.go
2024-12-04 05:02:46 .....         1651          829  clients/gitlabrepo/statuses.go
2024-12-04 05:02:46 .....         2246         1101  clients/gitlabrepo/statuses_test.go
2024-12-04 05:02:46 .....         9123         3269  clients/gitlabrepo/tarball.go
2024-12-04 05:02:46 .....         1534          787  clients/gitlabrepo/tarball_e2e_test.go
2024-12-04 05:02:46 .....         5036         1920  clients/gitlabrepo/tarball_test.go
2024-12-04 05:02:46 .....          268          273  clients/gitlabrepo/testdata/basic.tar.gz
2024-12-04 05:02:46 .....            4            6  clients/gitlabrepo/testdata/empty-response
2024-12-04 05:02:46 .....          370          221  clients/gitlabrepo/testdata/valid-checkruns
2024-12-04 05:02:46 .....        20402          763  clients/gitlabrepo/testdata/valid-commits
2024-12-04 05:02:46 .....         1817          715  clients/gitlabrepo/testdata/valid-issues
2024-12-04 05:02:46 .....         1002          362  clients/gitlabrepo/testdata/valid-repo-members
2024-12-04 05:02:46 .....          244          160  clients/gitlabrepo/testdata/valid-search-result
2024-12-04 05:02:46 .....            3            5  clients/gitlabrepo/testdata/valid-search-result-1
2024-12-04 05:02:46 .....          711          342  clients/gitlabrepo/testdata/valid-status
2024-12-04 05:02:46 .....          642          289  clients/gitlabrepo/testdata/valid-webhook
2024-12-04 05:02:46 .....         1900          952  clients/gitlabrepo/webhook.go
2024-12-04 05:02:46 .....         2437         1177  clients/gitlabrepo/webhook_test.go
2024-12-04 05:02:46 .....         1322          724  clients/gitlabrepo/workflow_e2e_test.go
2024-12-04 05:02:46 .....         1917          986  clients/gitlabrepo/workflows.go
2024-12-04 05:02:46 .....         1044          540  clients/issue.go
2024-12-04 05:02:46 .....         3138         1316  clients/languages.go
2024-12-04 05:02:46 .....         1106          559  clients/licenses.go
2024-12-04 05:02:46 .....         8476         2631  clients/localdir/client.go
2024-12-04 05:02:46 .....         5627         1967  clients/localdir/client_test.go
2024-12-04 05:02:46 .....         1975          940  clients/localdir/repo.go
2024-12-04 05:02:46 .....            9           11  clients/localdir/testdata/repo0/dir1/dir2/file2
2024-12-04 05:02:46 .....            9           11  clients/localdir/testdata/repo0/dir1/file1
2024-12-04 05:02:46 .....            9           11  clients/localdir/testdata/repo0/file0
2024-12-04 05:02:46 .....         2390         1008  clients/mockclients/cii_client.go
2024-12-04 05:02:46 .....          567          367  clients/mockclients/license.txt
2024-12-04 05:02:46 .....         2570         1025  clients/mockclients/projectpackageclient.go
2024-12-04 05:02:46 .....         4337         1241  clients/mockclients/repo.go
2024-12-04 05:02:46 .....        14775         2389  clients/mockclients/repo_client.go
2024-12-04 05:02:46 .....         2575         1026  clients/mockclients/vulnerabilities.go
2024-12-04 05:02:46 .....         8482         2464  clients/ossfuzz/client.go
2024-12-04 05:02:46 .....         9842         2149  clients/ossfuzz/client_test.go
2024-12-04 05:02:46 .....           95           61  clients/ossfuzz/testdata/invalid.json
2024-12-04 05:02:46 .....          658          201  clients/ossfuzz/testdata/status.json
2024-12-04 05:02:46 .....         3597         1711  clients/osv.go
2024-12-04 05:02:46 .....         1555          850  clients/osv_test.go
2024-12-04 05:02:46 .....         1025          580  clients/pull_request.go
2024-12-04 05:02:46 .....          911          511  clients/release.go
2024-12-04 05:02:46 .....         1206          649  clients/repo.go
2024-12-04 05:02:46 .....         2332         1102  clients/repo_client.go
2024-12-04 05:02:46 .....         1266          646  clients/search.go
2024-12-04 05:02:46 .....          748          457  clients/statuses.go
2024-12-04 05:02:46 .....         2977         1229  clients/user.go
2024-12-04 05:02:46 .....         1750          848  clients/vulnerabilities.go
2024-12-04 05:02:46 .....          746          461  clients/webhook.go
2024-12-04 05:02:46 .....          743          463  clients/workflows.go
2024-12-04 05:02:46 .....          107           83  cloudbuild/README.md
2024-12-04 05:02:46 .....         1053          565  cloudbuild/scorecard-tag.yaml
2024-12-04 05:02:46 .....          944          540  cloudbuild/scorecard.yaml
2024-12-04 05:02:46 .....         8575         2917  cmd/internal/nuget/client.go
2024-12-04 05:02:46 .....        21531         3253  cmd/internal/nuget/client_test.go
2024-12-04 05:02:46 .....         2112          955  cmd/internal/nuget/nuget_mockclient.go
2024-12-04 05:02:46 .....          430          230  cmd/internal/nuget/testdata/index.json
2024-12-04 05:02:46 .....          449          241  cmd/internal/nuget/testdata/index_bad_package_base.json
2024-12-04 05:02:46 .....          449          241  cmd/internal/nuget/testdata/index_bad_registration_base.json
2024-12-04 05:02:46 .....         1046          301  cmd/internal/nuget/testdata/package_registration_index_all_not_listed.json
2024-12-04 05:02:46 .....         1016          302  cmd/internal/nuget/testdata/package_registration_index_default_listed_true.json
2024-12-04 05:02:46 .....         1041          301  cmd/internal/nuget/testdata/package_registration_index_four_digit_version.json
2024-12-04 05:02:46 .....         1043          309  cmd/internal/nuget/testdata/package_registration_index_marshal_error.json
2024-12-04 05:02:46 .....         1053          307  cmd/internal/nuget/testdata/package_registration_index_metadata_version.json
2024-12-04 05:02:46 .....         1976          347  cmd/internal/nuget/testdata/package_registration_index_multiple.json
2024-12-04 05:02:46 .....         1966          354  cmd/internal/nuget/testdata/package_registration_index_multiple_last.json
2024-12-04 05:02:46 .....          424          162  cmd/internal/nuget/testdata/package_registration_index_multiple_remote.json
2024-12-04 05:02:46 .....         1063          309  cmd/internal/nuget/testdata/package_registration_index_pre_release_and_metadata_version.json
2024-12-04 05:02:46 .....         1049          303  cmd/internal/nuget/testdata/package_registration_index_pre_release_version.json
2024-12-04 05:02:46 .....         1032          307  cmd/internal/nuget/testdata/package_registration_index_single.json
2024-12-04 05:02:46 .....         1045          306  cmd/internal/nuget/testdata/package_registration_index_with_not_listed.json
2024-12-04 05:02:46 .....          823          266  cmd/internal/nuget/testdata/package_registration_page_one.json
2024-12-04 05:02:46 .....          823          268  cmd/internal/nuget/testdata/package_registration_page_two.json
2024-12-04 05:02:46 .....          813          265  cmd/internal/nuget/testdata/package_registration_page_two_not_listed.json
2024-12-04 05:02:46 .....          310          213  cmd/internal/nuget/testdata/package_spec.xml
2024-12-04 05:02:46 .....          202          150  cmd/internal/nuget/testdata/package_spec_error.xml
2024-12-04 05:02:46 .....          324          223  cmd/internal/nuget/testdata/package_spec_four_digit_version.xml
2024-12-04 05:02:46 .....          314          215  cmd/internal/nuget/testdata/package_spec_git_ending.xml
2024-12-04 05:02:46 .....          260          181  cmd/internal/nuget/testdata/package_spec_project_url.xml
2024-12-04 05:02:46 .....          264          183  cmd/internal/nuget/testdata/package_spec_project_url_git_ending.xml
2024-12-04 05:02:46 .....          260          180  cmd/internal/nuget/testdata/package_spec_project_url_gitlab.xml
2024-12-04 05:02:46 .....          262          182  cmd/internal/nuget/testdata/package_spec_project_url_not_supported.xml
2024-12-04 05:02:46 .....          311          214  cmd/internal/nuget/testdata/package_spec_trailing_slash.xml
2024-12-04 05:02:46 .....         1372          660  cmd/internal/packagemanager/client.go
2024-12-04 05:02:46 .....         3489         1127  cmd/internal/packagemanager/client_test.go
2024-12-04 05:02:46 .....         2507         1013  cmd/internal/packagemanager/packagemanager_mockclient.go
2024-12-04 05:02:46 .....         3796         1649  cmd/internal/scdiff/app/compare.go
2024-12-04 05:02:46 .....         1724          791  cmd/internal/scdiff/app/compare/compare.go
2024-12-04 05:02:46 .....         4108         1074  cmd/internal/scdiff/app/compare/compare_test.go
2024-12-04 05:02:46 .....         8000         1487  cmd/internal/scdiff/app/compare_test.go
2024-12-04 05:02:46 .....         1663          865  cmd/internal/scdiff/app/format/format.go
2024-12-04 05:02:46 .....         3685         1222  cmd/internal/scdiff/app/format/format_test.go
2024-12-04 05:02:46 .....         2878         1290  cmd/internal/scdiff/app/generate.go
2024-12-04 05:02:46 .....         2291         1125  cmd/internal/scdiff/app/generate_test.go
2024-12-04 05:02:46 .....          918          574  cmd/internal/scdiff/app/root.go
2024-12-04 05:02:46 .....         2344         1066  cmd/internal/scdiff/app/runner/runner.go
2024-12-04 05:02:46 .....         2180         1065  cmd/internal/scdiff/app/runner/runner_test.go
2024-12-04 05:02:46 .....         3564         1768  cmd/internal/scdiff/app/stats.go
2024-12-04 05:02:46 .....         2975         1304  cmd/internal/scdiff/app/stats_test.go
2024-12-04 05:02:46 .....         1197          703  cmd/internal/scdiff/main.go
2024-12-04 05:02:46 .....         7094         2261  cmd/package_managers.go
2024-12-04 05:02:46 .....        21816         5123  cmd/package_managers_test.go
2024-12-04 05:02:46 .....         7277         2826  cmd/root.go
2024-12-04 05:02:46 .....         3526         1595  cmd/serve.go
2024-12-04 05:02:46 .....          735          447  codeql.js
2024-12-04 05:02:46 .....         2786         1041  config/README.md
2024-12-04 05:02:46 .....         3382         1403  config/annotations.go
2024-12-04 05:02:46 .....         2499         1102  config/config.go
2024-12-04 05:02:46 .....         3413         1314  config/config_test.go
2024-12-04 05:02:46 .....          465          222  config/testdata/all_checks.yml
2024-12-04 05:02:46 .....          205          107  config/testdata/all_reasons.yml
2024-12-04 05:02:46 .....           83           64  config/testdata/invalid_check.yml
2024-12-04 05:02:46 .....           89           70  config/testdata/invalid_reason.yml
2024-12-04 05:02:46 .....          172           97  config/testdata/multiple_annotations.yml
2024-12-04 05:02:46 .....           88           69  config/testdata/single_check.yml
2024-12-04 05:02:46 .....          904          518  cron/cloudbuild/cii.yaml
2024-12-04 05:02:46 .....          929          523  cron/cloudbuild/controller.yaml
2024-12-04 05:02:46 .....          863          507  cron/cloudbuild/transfer.yaml
2024-12-04 05:02:46 .....          892          510  cron/cloudbuild/webhook.release.yaml
2024-12-04 05:02:46 .....          998          560  cron/cloudbuild/worker.yaml
2024-12-04 05:02:46 .....        14237         4307  cron/config/config.go
2024-12-04 05:02:46 .....         2366         1134  cron/config/config.yaml
2024-12-04 05:02:46 .....        15347         3678  cron/config/config_test.go
2024-12-04 05:02:46 .....          736          462  cron/config/testdata/basic.yaml
2024-12-04 05:02:46 .....          736          462  cron/config/testdata/missing_field.yaml
2024-12-04 05:02:46 .....          764          456  cron/config/testdata/optional_maps.yaml
2024-12-04 05:02:46 .....          251          175  cron/data/README.md
2024-12-04 05:02:46 .....         5320         1875  cron/data/blob.go
2024-12-04 05:02:46 .....         4547         1590  cron/data/blob_test.go
2024-12-04 05:02:46 .....         1411          733  cron/data/format.go
2024-12-04 05:02:46 .....         2291          890  cron/data/format_test.go
2024-12-04 05:02:46 .....         3371         1375  cron/data/iterator.go
2024-12-04 05:02:46 .....         9137         1818  cron/data/iterator_test.go
2024-12-04 05:02:46 .....         6806         2298  cron/data/metadata.pb.go
2024-12-04 05:02:46 .....          853          512  cron/data/metadata.proto
2024-12-04 05:02:46 .....        10286         2943  cron/data/request.pb.go
2024-12-04 05:02:46 .....         1036          592  cron/data/request.proto
2024-12-04 05:02:46 .....         4539         1824  cron/data/summary.go
2024-12-04 05:02:46 .....         3834         1537  cron/data/summary_test.go
2024-12-04 05:02:46 .....           74           52  cron/data/testdata/basic-gitlab-only.csv
2024-12-04 05:02:46 .....          153           72  cron/data/testdata/basic-with-gitlab.csv
2024-12-04 05:02:46 .....           93           53  cron/data/testdata/basic.csv
2024-12-04 05:02:46 .....            0            0  cron/data/testdata/blob_test/key1.txt
2024-12-04 05:02:46 .....            0            0  cron/data/testdata/blob_test/key2.txt
2024-12-04 05:02:46 .....            0            0  cron/data/testdata/blob_test/key3.txt
2024-12-04 05:02:46 .....            0            0  cron/data/testdata/blob_test/subdir/key4.txt
2024-12-04 05:02:46 .....            0            0  cron/data/testdata/blob_test/subdir/nested/key5.txt
2024-12-04 05:02:46 .....          142           92  cron/data/testdata/comment.csv
2024-12-04 05:02:46 .....           94           55  cron/data/testdata/empty_row.csv
2024-12-04 05:02:46 .....           95           55  cron/data/testdata/extra_column.csv
2024-12-04 05:02:46 .....           76           53  cron/data/testdata/failing_urls.csv
2024-12-04 05:02:46 .....           53           43  cron/data/testdata/ignore_header.csv
2024-12-04 05:02:46 .....           25           27  cron/data/testdata/no_header.csv
2024-12-04 05:02:46 .....           14           16  cron/data/testdata/only_header.csv
2024-12-04 05:02:46 .....           64           46  cron/data/testdata/split_file.csv
2024-12-04 05:02:46 .....           14           16  cron/data/testdata/split_file_empty.csv
2024-12-04 05:02:46 .....           87           83  cron/data/testdata/summary_test/basic/2022.09.19/020001/.shard_metadata
2024-12-04 05:02:46 .....            0            0  cron/data/testdata/summary_test/basic/2022.09.19/020001/.transfer_complete
2024-12-04 05:02:46 .....            0            0  cron/data/testdata/summary_test/basic/2022.09.19/020001/shard-0000000
2024-12-04 05:02:46 .....            0            0  cron/data/testdata/summary_test/basic/2022.09.19/020001/shard-0000001
2024-12-04 05:02:46 .....           87           83  cron/data/testdata/summary_test/basic/2022.09.26/020003/.shard_metadata
2024-12-04 05:02:46 .....            0            0  cron/data/testdata/summary_test/basic/2022.09.26/020003/shard-0000000
2024-12-04 05:02:46 .....            0            0  cron/data/testdata/summary_test/basic/2022.09.26/020003/shard-0000001
2024-12-04 05:02:46 .....            0            0  cron/data/testdata/summary_test/basic/2022.09.26/020003/shard-1234567
2024-12-04 05:02:46 .....            0            0  cron/data/testdata/summary_test/invalid/unknown_file
2024-12-04 05:02:46 .....         1896          903  cron/data/writer.go
2024-12-04 05:02:46 .....         1829          866  cron/data/writer_test.go
2024-12-04 05:02:46 .....         1099          682  cron/internal/bq/Dockerfile
2024-12-04 05:02:46 .....         3333         1306  cron/internal/bq/main.go
2024-12-04 05:02:46 .....         2298         1023  cron/internal/bq/transfer.go
2024-12-04 05:02:46 .....         1082          677  cron/internal/cii/Dockerfile
2024-12-04 05:02:46 .....         3209         1381  cron/internal/cii/main.go
2024-12-04 05:02:46 .....         1626          786  cron/internal/controller/Dockerfile
2024-12-04 05:02:46 .....         2714         1098  cron/internal/controller/bucket.go
2024-12-04 05:02:46 .....         2354          932  cron/internal/controller/bucket_test.go
2024-12-04 05:02:46 .....         5109         1941  cron/internal/controller/main.go
2024-12-04 05:02:46 .....            4            6  cron/internal/controller/testdata/getPrefix/marker
2024-12-04 05:02:46 .....         2814         1270  cron/internal/data/add/main.go
2024-12-04 05:02:46 .....         3527         1125  cron/internal/data/add/main_test.go
2024-12-04 05:02:46 .....           82           57  cron/internal/data/add/testdata/add_metadata.csv
2024-12-04 05:02:46 .....           77           55  cron/internal/data/add/testdata/no_change.csv
2024-12-04 05:02:46 .....          144           71  cron/internal/data/add/testdata/skip_duplicates.csv
2024-12-04 05:02:46 .....          107           61  cron/internal/data/add/testdata/skip_empty.csv
2024-12-04 05:02:46 .....          107           61  cron/internal/data/add/testdata/skip_empty_2.csv
2024-12-04 05:02:46 .....          115           64  cron/internal/data/add/testdata/skip_latest.csv
2024-12-04 05:02:46 .....        43020        13716  cron/internal/data/gitlab-projects-releasetest.csv
2024-12-04 05:02:46 .....       890447       240499  cron/internal/data/gitlab-projects.csv
2024-12-04 05:02:46 .....     72956804     15972051  cron/internal/data/projects.csv
2024-12-04 05:02:52 .....         1391          801  cron/internal/data/validate/main.go
2024-12-04 05:02:52 .....         3198         1383  cron/internal/emulator/README.md
2024-12-04 05:02:52 .....         2152         1063  cron/internal/emulator/config.yaml
2024-12-04 05:02:52 .....           14           16  cron/internal/emulator/fakegcs/ossf-scorecard-cii-data/.gitignore
2024-12-04 05:02:52 .....           14           16  cron/internal/emulator/fakegcs/ossf-scorecard-cron-results/.gitignore
2024-12-04 05:02:52 .....           14           16  cron/internal/emulator/fakegcs/ossf-scorecard-data2/.gitignore
2024-12-04 05:02:52 .....           14           16  cron/internal/emulator/fakegcs/ossf-scorecard-rawdata/.gitignore
2024-12-04 05:02:52 .....          109           61  cron/internal/emulator/projects.csv
2024-12-04 05:02:52 .....        10937         1352  cron/internal/format/bq.raw.schema
2024-12-04 05:02:52 .....         4719         1715  cron/internal/format/json.go
2024-12-04 05:02:52 .....         7872         1391  cron/internal/format/json.raw.schema
2024-12-04 05:02:52 .....         2616          467  cron/internal/format/json.v2.schema
2024-12-04 05:02:52 .....         9486         2924  cron/internal/format/json_raw_results.go
2024-12-04 05:02:52 .....         1834          831  cron/internal/format/json_raw_results_test.go
2024-12-04 05:02:52 .....        12612         2653  cron/internal/format/json_test.go
2024-12-04 05:02:52 .....         1854          810  cron/internal/format/mock_doc.go
2024-12-04 05:02:52 .....         2774         1310  cron/internal/format/schema_gen.go
2024-12-04 05:02:52 .....         3303         1070  cron/internal/format/schema_gen_test.go
2024-12-04 05:02:52 .....          495          133  cron/internal/format/testdata/bq-valid.schema
2024-12-04 05:02:52 .....          675          336  cron/internal/format/testdata/check1.json
2024-12-04 05:02:52 .....          672          333  cron/internal/format/testdata/check2.json
2024-12-04 05:02:52 .....         1490          450  cron/internal/format/testdata/check3.json
2024-12-04 05:02:52 .....         1540          464  cron/internal/format/testdata/check4.json
2024-12-04 05:02:52 .....          673          336  cron/internal/format/testdata/check5.json
2024-12-04 05:02:52 .....          686          339  cron/internal/format/testdata/check6.json
2024-12-04 05:02:52 .....          843          232  cron/internal/format/testdata/valid.schema
2024-12-04 05:02:52 .....         2560         1201  cron/internal/pubsub/publisher.go
2024-12-04 05:02:52 .....         2223         1047  cron/internal/pubsub/publisher_test.go
2024-12-04 05:02:52 .....         1643          874  cron/internal/pubsub/subscriber.go
2024-12-04 05:02:52 .....         3929         1602  cron/internal/pubsub/subscriber_gcs.go
2024-12-04 05:02:52 .....         2053          904  cron/internal/pubsub/subscriber_gocloud.go
2024-12-04 05:02:52 .....         2976         1260  cron/internal/pubsub/subscriber_gocloud_test.go
2024-12-04 05:02:52 .....         1526          799  cron/internal/shuffle/main.go
2024-12-04 05:02:52 .....         1090          674  cron/internal/webhook/Dockerfile
2024-12-04 05:02:52 .....         2765         1283  cron/internal/webhook/main.go
2024-12-04 05:02:52 .....         1081          673  cron/internal/worker/Dockerfile
2024-12-04 05:02:52 .....        12061         4017  cron/internal/worker/main.go
2024-12-04 05:02:52 .....         1560          814  cron/k8s/README.md
2024-12-04 05:02:52 .....         1485          744  cron/k8s/auth.yaml
2024-12-04 05:02:52 .....         1326          681  cron/k8s/cii.yaml
2024-12-04 05:02:52 .....         3094         1235  cron/k8s/controller.release.yaml
2024-12-04 05:02:52 .....         2503         1075  cron/k8s/controller.yaml
2024-12-04 05:02:52 .....         1700          809  cron/k8s/transfer-raw.yaml
2024-12-04 05:02:52 .....         1825          833  cron/k8s/transfer.release-raw.yaml
2024-12-04 05:02:52 .....         1902          861  cron/k8s/transfer.release.yaml
2024-12-04 05:02:52 .....         1476          723  cron/k8s/transfer.yaml
2024-12-04 05:02:52 .....         1360          684  cron/k8s/webhook.release.yaml
2024-12-04 05:02:52 .....         2838         1115  cron/k8s/worker.release.yaml
2024-12-04 05:02:52 .....         2155          918  cron/k8s/worker.yaml
2024-12-04 05:02:52 .....         2923         1267  cron/monitoring/exporter.go
2024-12-04 05:02:52 .....         1204          639  cron/monitoring/printer.go
2024-12-04 05:02:52 .....         5067         1967  cron/worker/worker.go
2024-12-04 05:02:52 .....         1446          829  cron/worker/worker_test.go
2024-12-04 05:02:52 .....         8990         3801  docs/beginner-checks.md
2024-12-04 05:02:52 .....        44714        17042  docs/checks.md
2024-12-04 05:02:52 .....          803          353  docs/checks/dependencyupdatetool/README.md
2024-12-04 05:02:52 .....         1135          596  docs/checks/doc.go
2024-12-04 05:02:52 .....         1744          761  docs/checks/fuzzing/README.md
2024-12-04 05:02:52 .....         3708         1413  docs/checks/impl.go
2024-12-04 05:02:52 .....        52570        18455  docs/checks/internal/checks.yaml
2024-12-04 05:02:52 .....         2180         1070  docs/checks/internal/generate/main.go
2024-12-04 05:02:52 .....         1561          815  docs/checks/internal/reader.go
2024-12-04 05:02:52 .....         2014          915  docs/checks/internal/validate/main.go
2024-12-04 05:02:52 .....          889          425  docs/checks/sast/README.md
2024-12-04 05:02:52 .....       484124       419115  docs/design/images/branch-protection-settings-admin-token.png
2024-12-04 05:02:52 .....       484310       418904  docs/design/images/branch-protection-settings-non-admin-token.png
2024-12-04 05:02:52 .....       198965        75337  docs/design/images/scorecard_architecture_diagram.svg
2024-12-04 05:02:52 .....       268396       251302  docs/design/images/scorecard_denormalization.png
2024-12-04 05:02:52 .....       279805       263201  docs/design/images/scorecard_limitation_nested_fields.png
2024-12-04 05:02:52 .....        82221        30151  docs/design/images/scorecard_mapreduce_diagram.svg
2024-12-04 05:02:52 .....       234325        88573  docs/design/images/scorecard_release_process_diagram.svg
2024-12-04 05:02:52 .....        12655         5638  docs/design/scalable_scorecard.md
2024-12-04 05:02:52 .....        11784         4165  docs/faq.md
2024-12-04 05:02:52 .....        34150         9700  docs/probes.md
2024-12-04 05:02:52 .....         2476         1292  docs/probes/internal/generate/main.go
2024-12-04 05:02:52 .....         3605         1565  docs/repositories.md
2024-12-04 05:02:52 .....         7457         1897  e2e/attestor_policy_test.go
2024-12-04 05:02:52 .....         7617         1589  e2e/binary_artifacts_test.go
2024-12-04 05:02:52 .....         6093         1422  e2e/branch_protection_test.go
2024-12-04 05:02:52 .....         5890         1416  e2e/ci_tests_test.go
2024-12-04 05:02:52 .....         1765          886  e2e/cii_best_practices_test.go
2024-12-04 05:02:52 .....         6794         1872  e2e/code_review_test.go
2024-12-04 05:02:52 .....         1354          728  e2e/config_test.go
2024-12-04 05:02:52 .....         2822         1276  e2e/contributors_test.go
2024-12-04 05:02:52 .....         3942         1206  e2e/dangerous_workflow_test.go
2024-12-04 05:02:52 .....         2869         1031  e2e/dependency_update_tool_test.go
2024-12-04 05:02:52 .....         1993          795  e2e/depsdev_test.go
2024-12-04 05:02:52 .....         1589          892  e2e/e2e_suite_test.go
2024-12-04 05:02:52 .....         7317         1366  e2e/fuzzing_test.go
2024-12-04 05:02:52 .....         6540         1402  e2e/license_test.go
2024-12-04 05:02:52 .....         2957         1081  e2e/maintained_test.go
2024-12-04 05:02:52 .....         1917          925  e2e/packaging_test.go
2024-12-04 05:02:52 .....         4057         1223  e2e/permissions_test.go
2024-12-04 05:02:52 .....         4061         1256  e2e/pinned_dependencies_test.go
2024-12-04 05:02:52 .....         1855          910  e2e/sast_test.go
2024-12-04 05:02:52 .....         2186          826  e2e/searchCommits_test.go
2024-12-04 05:02:52 .....         6301         1541  e2e/security_policy_test.go
2024-12-04 05:02:52 .....         2062          972  e2e/signedreleases_test.go
2024-12-04 05:02:52 .....         4337         1158  e2e/vulnerabilities_test.go
2024-12-04 05:02:52 .....         2848          910  e2e/workflow_test.go
2024-12-04 05:02:52 .....         1169          501  errors/errors.md
2024-12-04 05:02:52 .....          793          476  errors/internal.go
2024-12-04 05:02:52 .....         1226          673  errors/internal_test.go
2024-12-04 05:02:52 .....         2621         1181  errors/public.go
2024-12-04 05:02:52 .....         2224          903  errors/public_test.go
2024-12-04 05:02:52 .....         8559         2812  finding/finding.go
2024-12-04 05:02:52 .....         7519         1977  finding/finding_test.go
2024-12-04 05:02:52 .....         6555         2256  finding/probe.go
2024-12-04 05:02:52 .....         3305         1252  finding/probe_test.go
2024-12-04 05:02:52 .....          408          225  finding/testdata/all-fields.yml
2024-12-04 05:02:52 .....          318          173  finding/testdata/effort-high.yml
2024-12-04 05:02:52 .....          316          173  finding/testdata/effort-low.yml
2024-12-04 05:02:52 .....          384          208  finding/testdata/invalid-client.yml
2024-12-04 05:02:52 .....          305          160  finding/testdata/invalid-effort.yml
2024-12-04 05:02:52 .....          391          210  finding/testdata/invalid-language.yml
2024-12-04 05:02:52 .....          405          224  finding/testdata/invalid-lifecycle.yml
2024-12-04 05:02:52 .....          412          190  finding/testdata/metadata-variables.yml
2024-12-04 05:02:52 .....          282          151  finding/testdata/missing-id.yml
2024-12-04 05:02:52 .....          390          214  finding/testdata/missing-lifecycle.yml
2024-12-04 05:02:52 .....         9314         3226  go.mod
2024-12-04 05:02:52 .....       125248        53534  go.sum
2024-12-04 05:02:52 .....         5448         2264  governance/openssf_scorecard_incubation_stage.md
2024-12-04 05:02:52 .....         2050          876  internal/checknames/checknames.go
2024-12-04 05:02:52 .....         1312          700  internal/csproj/csproj.go
2024-12-04 05:02:52 .....         1505          688  internal/fuzzers/fuzzers.go
2024-12-04 05:02:52 .....         2847         1224  internal/packageclient/depsdev.go
2024-12-04 05:02:52 .....         2435         1003  internal/probes/probes.go
2024-12-04 05:02:52 .....         3607         1275  internal/probes/probes_test.go
2024-12-04 05:02:52 .....         1290          626  internal/probes/yaml/yaml.go
2024-12-04 05:02:52 .....         3349         1461  log/log.go
2024-12-04 05:02:52 .....         2380          871  log/log_test.go
2024-12-04 05:02:52 .....          896          540  main.go
2024-12-04 05:02:52 .....         5260         1838  options/flags.go
2024-12-04 05:02:52 .....         6040         1683  options/flags_test.go
2024-12-04 05:02:52 .....         6691         2650  options/options.go
2024-12-04 05:02:52 .....         3184         1213  options/options_test.go
2024-12-04 05:02:52 .....         3532         1440  pkg/scorecard/common.go
2024-12-04 05:02:52 .....         3442         1025  pkg/scorecard/common_test.go
2024-12-04 05:02:52 .....         6787         2463  pkg/scorecard/json.go
2024-12-04 05:02:52 .....         7854         1383  pkg/scorecard/json.raw.schema
2024-12-04 05:02:52 .....         2616          467  pkg/scorecard/json.v2.schema
2024-12-04 05:02:52 .....        24499         6914  pkg/scorecard/json_raw_results.go
2024-12-04 05:02:52 .....        35088         7521  pkg/scorecard/json_raw_results_test.go
2024-12-04 05:02:52 .....        14989         3286  pkg/scorecard/json_test.go
2024-12-04 05:02:52 .....         1857          809  pkg/scorecard/mock_doc.go
2024-12-04 05:02:52 .....          974          615  pkg/scorecard/pkg_suite_test.go
2024-12-04 05:02:52 .....         2027         1003  pkg/scorecard/probe.go
2024-12-04 05:02:52 .....         2235         1104  pkg/scorecard/probe_test.go
2024-12-04 05:02:52 .....        22144         7967  pkg/scorecard/sarif.go
2024-12-04 05:02:52 .....        24425         3533  pkg/scorecard/sarif_test.go
2024-12-04 05:02:52 .....        11510         3975  pkg/scorecard/scorecard.go
2024-12-04 05:02:52 .....         4363         1670  pkg/scorecard/scorecard_e2e_test.go
2024-12-04 05:02:52 .....        12450         3561  pkg/scorecard/scorecard_result.go
2024-12-04 05:02:52 .....         5497         2185  pkg/scorecard/scorecard_result_test.go
2024-12-04 05:02:52 .....        11093         3048  pkg/scorecard/scorecard_test.go
2024-12-04 05:02:52 .....           88           69  pkg/scorecard/testdata/.github/scorecard.yml
2024-12-04 05:02:52 .....           88           69  pkg/scorecard/testdata/.scorecard.yml
2024-12-04 05:02:52 .....         2901          921  pkg/scorecard/testdata/check-remediation.sarif
2024-12-04 05:02:52 .....          690          348  pkg/scorecard/testdata/check1.json
2024-12-04 05:02:52 .....          935          287  pkg/scorecard/testdata/check1.log
2024-12-04 05:02:52 .....         2790          894  pkg/scorecard/testdata/check1.sarif
2024-12-04 05:02:52 .....          947          454  pkg/scorecard/testdata/check1_annotations.json
2024-12-04 05:02:52 .....         1679          424  pkg/scorecard/testdata/check1_annotations.log
2024-12-04 05:02:52 .....         1822          643  pkg/scorecard/testdata/check1_annotations.sarif
2024-12-04 05:02:52 .....          687          345  pkg/scorecard/testdata/check2.json
2024-12-04 05:02:52 .....         2666          867  pkg/scorecard/testdata/check2.sarif
2024-12-04 05:02:52 .....         1505          462  pkg/scorecard/testdata/check3.json
2024-12-04 05:02:52 .....         6142         1147  pkg/scorecard/testdata/check3.sarif
2024-12-04 05:02:52 .....         1555          477  pkg/scorecard/testdata/check4.json
2024-12-04 05:02:52 .....         6142         1147  pkg/scorecard/testdata/check4.sarif
2024-12-04 05:02:52 .....          688          348  pkg/scorecard/testdata/check5.json
2024-12-04 05:02:52 .....         1822          643  pkg/scorecard/testdata/check5.sarif
2024-12-04 05:02:52 .....          701          350  pkg/scorecard/testdata/check6.json
2024-12-04 05:02:52 .....         2592          883  pkg/scorecard/testdata/check6.sarif
2024-12-04 05:02:52 .....         5232         1058  pkg/scorecard/testdata/check7.sarif
2024-12-04 05:02:52 .....        12420         1333  pkg/scorecard/testdata/check8.sarif
2024-12-04 05:02:52 .....          635          242  pkg/scorecard/testdata/probe1.json
2024-12-04 05:02:52 .....           88           69  pkg/scorecard/testdata/scorecard.yml
2024-12-04 05:02:52 .....         6640         2291  policy/policy.go
2024-12-04 05:02:52 .....        10627         3047  policy/policy.pb.go
2024-12-04 05:02:52 .....          969          559  policy/policy.proto
2024-12-04 05:02:52 .....         9581         2845  policy/policy_test.go
2024-12-04 05:02:52 .....          664          419  policy/testdata/policy-invalid-check.yaml
2024-12-04 05:02:52 .....          667          418  policy/testdata/policy-invalid-mode.yaml
2024-12-04 05:02:52 .....          669          419  policy/testdata/policy-invalid-score-0.yaml
2024-12-04 05:02:52 .....          669          418  policy/testdata/policy-invalid-score-10.yaml
2024-12-04 05:02:52 .....          834          471  policy/testdata/policy-multiple-defs.yaml
2024-12-04 05:02:52 .....          762          461  policy/testdata/policy-no-score-disabled.yaml
2024-12-04 05:02:52 .....          777          464  policy/testdata/policy-ok.yaml
2024-12-04 05:02:52 .....         3003         1385  probes/README.md
2024-12-04 05:02:52 .....         1186          661  probes/archived/def.yml
2024-12-04 05:02:52 .....         1862          818  probes/archived/impl.go
2024-12-04 05:02:52 .....         2121          971  probes/archived/impl_test.go
2024-12-04 05:02:52 .....         1408          770  probes/blocksDeleteOnBranches/def.yml
2024-12-04 05:02:52 .....         2526         1099  probes/blocksDeleteOnBranches/impl.go
2024-12-04 05:02:52 .....         4738         1301  probes/blocksDeleteOnBranches/impl_test.go
2024-12-04 05:02:52 .....         2449          994  probes/blocksForcePushOnBranches/def.yml
2024-12-04 05:02:52 .....         2517         1095  probes/blocksForcePushOnBranches/impl.go
2024-12-04 05:02:52 .....         4662         1276  probes/blocksForcePushOnBranches/impl_test.go
2024-12-04 05:02:52 .....         2428          957  probes/branchProtectionAppliesToAdmins/def.yml
2024-12-04 05:02:52 .....         2306         1013  probes/branchProtectionAppliesToAdmins/impl.go
2024-12-04 05:02:52 .....         4716         1281  probes/branchProtectionAppliesToAdmins/impl_test.go
2024-12-04 05:02:52 .....         1890          821  probes/branchesAreProtected/def.yml
2024-12-04 05:02:52 .....         2282         1012  probes/branchesAreProtected/impl.go
2024-12-04 05:02:52 .....         4153         1275  probes/branchesAreProtected/impl_test.go
2024-12-04 05:02:52 .....         1885          905  probes/codeApproved/def.yml
2024-12-04 05:02:52 .....         3965         1655  probes/codeApproved/impl.go
2024-12-04 05:02:52 .....         8909         1705  probes/codeApproved/impl_test.go
2024-12-04 05:02:52 .....         1764          859  probes/codeReviewOneReviewers/def.yml
2024-12-04 05:02:52 .....         4995         1831  probes/codeReviewOneReviewers/impl.go
2024-12-04 05:02:52 .....         8626         1704  probes/codeReviewOneReviewers/impl_test.go
2024-12-04 05:02:52 .....         1880          967  probes/contributorsFromOrgOrCompany/def.yml
2024-12-04 05:02:52 .....         2600         1084  probes/contributorsFromOrgOrCompany/impl.go
2024-12-04 05:02:52 .....         4097         1288  probes/contributorsFromOrgOrCompany/impl_test.go
2024-12-04 05:02:52 .....         1508          808  probes/createdRecently/def.yml
2024-12-04 05:02:52 .....         2000          994  probes/createdRecently/impl.go
2024-12-04 05:02:52 .....         2185         1016  probes/createdRecently/impl_test.go
2024-12-04 05:02:52 .....         1822          917  probes/dependencyUpdateToolConfigured/def.yml
2024-12-04 05:02:52 .....         2032          970  probes/dependencyUpdateToolConfigured/impl.go
2024-12-04 05:02:52 .....         4008         1412  probes/dependencyUpdateToolConfigured/impl_test.go
2024-12-04 05:02:52 .....         1870          968  probes/dismissesStaleReviews/def.yml
2024-12-04 05:02:52 .....         2280         1009  probes/dismissesStaleReviews/impl.go
2024-12-04 05:02:52 .....         5137         1239  probes/dismissesStaleReviews/impl_test.go
2024-12-04 05:02:52 .....         7091         2038  probes/entries.go
2024-12-04 05:02:52 .....         1703          900  probes/fuzzed/def.yml
2024-12-04 05:02:52 .....         2343         1026  probes/fuzzed/impl.go
2024-12-04 05:02:52 .....         4229         1450  probes/fuzzed/impl_test.go
2024-12-04 05:02:52 .....         1405          769  probes/hasBinaryArtifacts/def.yml
2024-12-04 05:02:52 .....         2022          971  probes/hasBinaryArtifacts/impl.go
2024-12-04 05:02:52 .....         3506         1135  probes/hasBinaryArtifacts/impl_test.go
2024-12-04 05:02:52 .....         1860          988  probes/hasDangerousWorkflowScriptInjection/def.yml
2024-12-04 05:02:52 .....         4126         1678  probes/hasDangerousWorkflowScriptInjection/impl.go
2024-12-04 05:02:52 .....         2553         1106  probes/hasDangerousWorkflowScriptInjection/impl_test.go
2024-12-04 05:02:52 .....        19167         6719  probes/hasDangerousWorkflowScriptInjection/internal/patch/impl.go
2024-12-04 05:02:52 .....         7431         3022  probes/hasDangerousWorkflowScriptInjection/internal/patch/impl_test.go
2024-12-04 05:02:52 .....          908          534  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/arrayVariables.yaml
2024-12-04 05:02:52 .....          952          559  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/arrayVariables_fixed_1.yaml
2024-12-04 05:02:52 .....          952          558  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/arrayVariables_fixed_2.yaml
2024-12-04 05:02:52 .....         1206          636  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/crazyButValidIndentation.yaml
2024-12-04 05:02:52 .....         1249          658  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/crazyButValidIndentation_fixed.yaml
2024-12-04 05:02:52 .....         1114          663  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/envVarNameAlreadyInUse.yaml
2024-12-04 05:02:52 .....         1152          674  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/envVarNameAlreadyInUse_fixed.yaml
2024-12-04 05:02:52 .....          886          541  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/fourSpacesIndentationExistentEnvVar.yaml
2024-12-04 05:02:52 .....          916          562  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/fourSpacesIndentationExistentEnvVar_fixed.yaml
2024-12-04 05:02:52 .....          870          523  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/ignorePatternInsideComments.yaml
2024-12-04 05:02:52 .....          901          556  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/newlineOnEOF.yaml
2024-12-04 05:02:52 .....          935          576  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/newlineOnEOF_fixed.yaml
2024-12-04 05:02:52 .....          800          495  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/noLineBreaksBetweenBlocks.yaml
2024-12-04 05:02:52 .....          837          517  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/noLineBreaksBetweenBlocks_fixed.yaml
2024-12-04 05:02:52 .....         2605         1144  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/realExample1.yaml
2024-12-04 05:02:52 .....         2643         1161  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/realExample1_fixed.yaml
2024-12-04 05:02:52 .....         3337         1253  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/realExample2.yaml
2024-12-04 05:02:52 .....         3371         1278  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/realExample2_fixed.yaml
2024-12-04 05:02:52 .....         1239          579  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/realExample3.yaml
2024-12-04 05:02:52 .....         1265          600  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/realExample3_fixed.yaml
2024-12-04 05:02:52 .....         1821          767  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/reuseEnvVarSmallerScope.yaml
2024-12-04 05:02:52 .....         1737          764  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/reuseEnvVarSmallerScope_fixed.yaml
2024-12-04 05:02:52 .....          971          596  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/reuseEnvVarWithDiffName.yaml
2024-12-04 05:02:52 .....          946          591  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/reuseEnvVarWithDiffName_fixed.yaml
2024-12-04 05:02:52 .....         1836          872  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/reuseWorkflowLevelEnvVars.yaml
2024-12-04 05:02:52 .....         1809          864  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/reuseWorkflowLevelEnvVars_fixed_1.yaml
2024-12-04 05:02:52 .....         1862          886  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/reuseWorkflowLevelEnvVars_fixed_2.yaml
2024-12-04 05:02:52 .....         1862          888  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/reuseWorkflowLevelEnvVars_fixed_3.yaml
2024-12-04 05:02:52 .....          895          515  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/twoInjectionsDifferentJobs.yaml
2024-12-04 05:02:52 .....          929          541  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/twoInjectionsDifferentJobs_fixed_1.yaml
2024-12-04 05:02:52 .....          927          540  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/twoInjectionsDifferentJobs_fixed_2.yaml
2024-12-04 05:02:52 .....          870          511  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/twoInjectionsSameJob.yaml
2024-12-04 05:02:52 .....          904          536  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/twoInjectionsSameJob_fixed_1.yaml
2024-12-04 05:02:52 .....          902          536  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/twoInjectionsSameJob_fixed_2.yaml
2024-12-04 05:02:52 .....          896          519  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/twoInjectionsSameStep.yaml
2024-12-04 05:02:52 .....          911          540  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/twoInjectionsSameStep_fixed_1.yaml
2024-12-04 05:02:52 .....          928          540  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/twoInjectionsSameStep_fixed_3.yaml
2024-12-04 05:02:52 .....          976          586  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/userInputAssignedToVariable.yaml
2024-12-04 05:02:52 .....         1020          609  probes/hasDangerousWorkflowScriptInjection/internal/patch/testdata/userInputAssignedToVariable_fixed.yaml
2024-12-04 05:02:52 .....         1962         1006  probes/hasDangerousWorkflowUntrustedCheckout/def.yml
2024-12-04 05:02:52 .....         2549         1105  probes/hasDangerousWorkflowUntrustedCheckout/impl.go
2024-12-04 05:02:52 .....         2440         1059  probes/hasDangerousWorkflowUntrustedCheckout/impl_test.go
2024-12-04 05:02:52 .....         1605          813  probes/hasFSFOrOSIApprovedLicense/def.yml
2024-12-04 05:02:52 .....         2239          979  probes/hasFSFOrOSIApprovedLicense/impl.go
2024-12-04 05:02:52 .....         3936         1214  probes/hasFSFOrOSIApprovedLicense/impl_test.go
2024-12-04 05:02:52 .....         2097         1084  probes/hasLicenseFile/def.yml
2024-12-04 05:02:52 .....         1924          900  probes/hasLicenseFile/impl.go
2024-12-04 05:02:52 .....         2940         1087  probes/hasLicenseFile/impl_test.go
2024-12-04 05:02:52 .....         2095          892  probes/hasNoGitHubWorkflowPermissionUnknown/def.yml
2024-12-04 05:02:52 .....         2121          911  probes/hasNoGitHubWorkflowPermissionUnknown/impl.go
2024-12-04 05:02:52 .....         2587         1066  probes/hasNoGitHubWorkflowPermissionUnknown/impl_test.go
2024-12-04 05:02:52 .....         2939         1228  probes/hasOSVVulnerabilities/def.yml
2024-12-04 05:02:52 .....         2505         1127  probes/hasOSVVulnerabilities/impl.go
2024-12-04 05:02:52 .....         4639         1517  probes/hasOSVVulnerabilities/impl_test.go
2024-12-04 05:02:52 .....         1666          823  probes/hasOpenSSFBadge/def.yml
2024-12-04 05:02:52 .....         2355         1052  probes/hasOpenSSFBadge/impl.go
2024-12-04 05:02:52 .....         2824         1028  probes/hasOpenSSFBadge/impl_test.go
2024-12-04 05:02:52 .....         1385          717  probes/hasPermissiveLicense/def.yml
2024-12-04 05:02:52 .....         2785         1177  probes/hasPermissiveLicense/impl.go
2024-12-04 05:02:52 .....         3296         1135  probes/hasPermissiveLicense/impl_test.go
2024-12-04 05:02:52 .....         1946         1000  probes/hasRecentCommits/def.yml
2024-12-04 05:02:52 .....         2314         1115  probes/hasRecentCommits/impl.go
2024-12-04 05:02:52 .....         3784         1364  probes/hasRecentCommits/impl_test.go
2024-12-04 05:02:52 .....         2094         1054  probes/hasReleaseSBOM/def.yml
2024-12-04 05:02:52 .....         2211         1034  probes/hasReleaseSBOM/impl.go
2024-12-04 05:02:52 .....         3026         1154  probes/hasReleaseSBOM/impl_test.go
2024-12-04 05:02:52 .....         2042         1032  probes/hasSBOM/def.yml
2024-12-04 05:02:52 .....         1891          888  probes/hasSBOM/impl.go
2024-12-04 05:02:52 .....         2582         1098  probes/hasSBOM/impl_test.go
2024-12-04 05:02:52 .....         1612          846  probes/hasUnverifiedBinaryArtifacts/def.yml
2024-12-04 05:02:52 .....         2074          984  probes/hasUnverifiedBinaryArtifacts/impl.go
2024-12-04 05:02:52 .....         2967         1088  probes/hasUnverifiedBinaryArtifacts/impl_test.go
2024-12-04 05:02:52 .....         4223         1288  probes/internal/scripts/setup.go
2024-12-04 05:02:52 .....         1356          690  probes/internal/utils/branchprotection/branchProtection.go
2024-12-04 05:02:52 .....         4730         1376  probes/internal/utils/permissions/permissions.go
2024-12-04 05:02:52 .....         1726          693  probes/internal/utils/secpolicy/secpolicy.go
2024-12-04 05:02:52 .....         4580         1222  probes/internal/utils/test/test.go
2024-12-04 05:02:52 .....          681          430  probes/internal/utils/uerror/error.go
2024-12-04 05:02:52 .....         1916          924  probes/issueActivityByProjectMember/def.yml
2024-12-04 05:02:52 .....         3223         1402  probes/issueActivityByProjectMember/impl.go
2024-12-04 05:02:52 .....         6400         1890  probes/issueActivityByProjectMember/impl_test.go
2024-12-04 05:02:52 .....         2113          895  probes/jobLevelPermissions/def.yml
2024-12-04 05:02:52 .....         3155         1114  probes/jobLevelPermissions/impl.go
2024-12-04 05:02:52 .....         2128          897  probes/jobLevelPermissions/impl_test.go
2024-12-04 05:02:52 .....         1583          857  probes/packagedWithAutomatedWorkflow/def.yml
2024-12-04 05:02:52 .....         2182         1066  probes/packagedWithAutomatedWorkflow/impl.go
2024-12-04 05:02:52 .....         2164         1009  probes/packagedWithAutomatedWorkflow/impl_test.go
2024-12-04 05:02:52 .....         1869          966  probes/pinsDependencies/def.yml
2024-12-04 05:02:52 .....         4139         1523  probes/pinsDependencies/impl.go
2024-12-04 05:02:52 .....        17261         2508  probes/pinsDependencies/impl_test.go
2024-12-04 05:02:52 .....         1734          868  probes/releasesAreSigned/def.yml
2024-12-04 05:02:52 .....         3226         1358  probes/releasesAreSigned/impl.go
2024-12-04 05:02:52 .....         7844         1689  probes/releasesAreSigned/impl_test.go
2024-12-04 05:02:52 .....         1681          843  probes/releasesHaveProvenance/def.yml
2024-12-04 05:02:52 .....         3338         1386  probes/releasesHaveProvenance/impl.go
2024-12-04 05:02:52 .....         7834         1392  probes/releasesHaveProvenance/impl_test.go
2024-12-04 05:02:52 .....         2092         1098  probes/releasesHaveVerifiedProvenance/def.yml
2024-12-04 05:02:52 .....         2088          894  probes/releasesHaveVerifiedProvenance/impl.go
2024-12-04 05:02:52 .....         2862         1124  probes/releasesHaveVerifiedProvenance/impl_test.go
2024-12-04 05:02:52 .....         2130          879  probes/requiresApproversForPullRequests/def.yml
2024-12-04 05:02:52 .....         2979         1257  probes/requiresApproversForPullRequests/impl.go
2024-12-04 05:02:52 .....         5400         1325  probes/requiresApproversForPullRequests/impl_test.go
2024-12-04 05:02:52 .....         2097          900  probes/requiresCodeOwnersReview/def.yml
2024-12-04 05:02:52 .....         2669         1155  probes/requiresCodeOwnersReview/impl.go
2024-12-04 05:02:52 .....         8507         1476  probes/requiresCodeOwnersReview/impl_test.go
2024-12-04 05:02:52 .....         2567          984  probes/requiresLastPushApproval/def.yml
2024-12-04 05:02:52 .....         2264          993  probes/requiresLastPushApproval/impl.go
2024-12-04 05:02:52 .....         4756         1316  probes/requiresLastPushApproval/impl_test.go
2024-12-04 05:02:52 .....         2049          848  probes/requiresPRsToChangeCode/def.yml
2024-12-04 05:02:52 .....         2957         1306  probes/requiresPRsToChangeCode/impl.go
2024-12-04 05:02:52 .....         5376         1330  probes/requiresPRsToChangeCode/impl_test.go
2024-12-04 05:02:52 .....         2235          892  probes/requiresUpToDateBranches/def.yml
2024-12-04 05:02:52 .....         2278         1002  probes/requiresUpToDateBranches/impl.go
2024-12-04 05:02:52 .....         5262         1325  probes/requiresUpToDateBranches/impl_test.go
2024-12-04 05:02:52 .....         1410          776  probes/runsStatusChecksBeforeMerging/def.yml
2024-12-04 05:02:52 .....         2424         1056  probes/runsStatusChecksBeforeMerging/impl.go
2024-12-04 05:02:52 .....         5119         1268  probes/runsStatusChecksBeforeMerging/impl_test.go
2024-12-04 05:02:52 .....         1669          865  probes/sastToolConfigured/def.yml
2024-12-04 05:02:52 .....         1975          941  probes/sastToolConfigured/impl.go
2024-12-04 05:02:52 .....         4335         1492  probes/sastToolConfigured/impl_test.go
2024-12-04 05:02:52 .....         2040          925  probes/sastToolRunsOnAllCommits/def.yml
2024-12-04 05:02:52 .....         2691         1165  probes/sastToolRunsOnAllCommits/impl.go
2024-12-04 05:02:52 .....         3112         1248  probes/sastToolRunsOnAllCommits/impl_test.go
2024-12-04 05:02:52 .....         3144         1151  probes/securityPolicyContainsLinks/def.yml
2024-12-04 05:02:52 .....         2370         1019  probes/securityPolicyContainsLinks/impl.go
2024-12-04 05:02:52 .....         7387         1352  probes/securityPolicyContainsLinks/impl_test.go
2024-12-04 05:02:52 .....         3382         1212  probes/securityPolicyContainsText/def.yml
2024-12-04 05:02:52 .....         2850         1132  probes/securityPolicyContainsText/impl.go
2024-12-04 05:02:52 .....        10600         1487  probes/securityPolicyContainsText/impl_test.go
2024-12-04 05:02:52 .....         3288         1141  probes/securityPolicyContainsVulnerabilityDisclosure/def.yml
2024-12-04 05:02:52 .....         2416         1049  probes/securityPolicyContainsVulnerabilityDisclosure/impl.go
2024-12-04 05:02:52 .....         6331         1299  probes/securityPolicyContainsVulnerabilityDisclosure/impl_test.go
2024-12-04 05:02:52 .....         3887         1421  probes/securityPolicyPresent/def.yml
2024-12-04 05:02:52 .....         2121          947  probes/securityPolicyPresent/impl.go
2024-12-04 05:02:52 .....         3161         1117  probes/securityPolicyPresent/impl_test.go
2024-12-04 05:02:52 .....         1690          927  probes/testsRunInCI/def.yml
2024-12-04 05:02:52 .....         4417         1699  probes/testsRunInCI/impl.go
2024-12-04 05:02:52 .....        10062         2470  probes/testsRunInCI/impl_test.go
2024-12-04 05:02:52 .....         2120          904  probes/topLevelPermissions/def.yml
2024-12-04 05:02:52 .....         3367         1187  probes/topLevelPermissions/impl.go
2024-12-04 05:02:52 .....         2128          895  probes/topLevelPermissions/impl_test.go
2024-12-04 05:02:52 .....          689          432  probes/utils/codeReview.go
2024-12-04 05:02:52 .....         2510          955  probes/webhooksUseSecrets/def.yml
2024-12-04 05:02:52 .....         2333          996  probes/webhooksUseSecrets/impl.go
2024-12-04 05:02:52 .....         4361         1211  probes/webhooksUseSecrets/impl_test.go
2024-12-04 05:02:52 .....         1547          800  probes/zrunner/runner.go
2024-12-04 05:02:52 .....         3596         1491  remediation/remediations.go
2024-12-04 05:02:52 .....         5251         1858  remediation/remediations_test.go
2024-12-04 05:02:52 .....          222          157  scripts/tree-status
2024-12-04 05:02:52 .....         1277          765  scripts/version-ldflags
2024-12-04 05:02:52 .....         1172          577  stats/measures.go
2024-12-04 05:02:52 .....         1038          549  stats/tags.go
2024-12-04 05:02:52 .....         1781          782  stats/views.go
2024-12-04 05:02:52 .....        24649         7417  tools/go.mod
2024-12-04 05:02:52 .....       134897        64010  tools/go.sum
2024-12-04 05:02:52 .....          946          519  tools/tools.go
2024-12-04 05:02:52 .....         4537         1723  utests/utlib.go
------------------- ----- ------------ ------------  ------------------------
2024-12-04 05:02:52           83392099     21856686  1070 files

Copy link

codecov bot commented Dec 4, 2024

Codecov Report

Attention: Patch coverage is 45.28302% with 29 lines in your changes missing coverage. Please review.

Project coverage is 68.53%. Comparing base (353ed60) to head (a8af2db).
Report is 70 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #4432      +/-   ##
==========================================
+ Coverage   66.80%   68.53%   +1.73%     
==========================================
  Files         230      240      +10     
  Lines       16602    17879    +1277     
==========================================
+ Hits        11091    12254    +1163     
- Misses       4808     4823      +15     
- Partials      703      802      +99     

@JamieMagee
Copy link
Contributor Author

Getting closer to a complete run

Details
$ env SCORECARD_EXPERIMENTAL=1 go run . --repo dev.azure.com/jamiemagee/jamiemagee/_git/scorecard
Starting [License]
Starting [SAST]
Starting [Contributors]
Starting [Binary-Artifacts]
Starting [CII-Best-Practices]
Starting [Vulnerabilities]
Starting [Code-Review]
Starting [Packaging]
Starting [Pinned-Dependencies]
Starting [Maintained]
Starting [Dependency-Update-Tool]
Starting [CI-Tests]
Starting [Signed-Releases]
Starting [SBOM]
Starting [Webhooks]
Starting [Token-Permissions]
Starting [Fuzzing]
Starting [Security-Policy]
Starting [Branch-Protection]
Starting [Dangerous-Workflow]
2024/12/03 21:08:11 Project language analytics not ready yet. Results may be incomplete.
Finished [Code-Review]
Finished [Packaging]
Finished [Pinned-Dependencies]
Finished [Dependency-Update-Tool]
Finished [CI-Tests]
Finished [Signed-Releases]
Finished [Maintained]
Finished [Token-Permissions]
Finished [Fuzzing]
Finished [Security-Policy]
Finished [Branch-Protection]
Finished [Dangerous-Workflow]
Finished [SBOM]
Finished [Webhooks]
Finished [Contributors]
Finished [Binary-Artifacts]
Finished [CII-Best-Practices]
Finished [Vulnerabilities]
Finished [License]
Finished [SAST]

RESULTS
-------
Aggregate score: 7.7 / 10

Check scores:
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
|  SCORE  |          NAME          |                REASON                 |                             DOCUMENTATION/REMEDIATION                             |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| 10 / 10 | Binary-Artifacts       | no binaries found in the repo         | https://github.com/ossf/scorecard/blob/main/docs/checks.md#binary-artifacts       |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| ?       | Branch-Protection      | internal error: unsupported           | https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection      |
|         |                        | feature                               |                                                                                   |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| ?       | CI-Tests               | no pull request found                 | https://github.com/ossf/scorecard/blob/main/docs/checks.md#ci-tests               |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| 0 / 10  | CII-Best-Practices     | no effort to earn an OpenSSF          | https://github.com/ossf/scorecard/blob/main/docs/checks.md#cii-best-practices     |
|         |                        | best practices badge detected         |                                                                                   |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| 0 / 10  | Code-Review            | Found 0/30 approved changesets        | https://github.com/ossf/scorecard/blob/main/docs/checks.md#code-review            |
|         |                        | -- score normalized to 0              |                                                                                   |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| ?       | Contributors           | internal error:                       | https://github.com/ossf/scorecard/blob/main/docs/checks.md#contributors           |
|         |                        | Client.Repositories.ListContributors: |                                                                                   |
|         |                        | unsupported feature                   |                                                                                   |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| 10 / 10 | Dangerous-Workflow     | no dangerous workflow patterns        | https://github.com/ossf/scorecard/blob/main/docs/checks.md#dangerous-workflow     |
|         |                        | detected                              |                                                                                   |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| 10 / 10 | Dependency-Update-Tool | update tool detected                  | https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| 10 / 10 | Fuzzing                | project is fuzzed                     | https://github.com/ossf/scorecard/blob/main/docs/checks.md#fuzzing                |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| 9 / 10  | License                | license file detected                 | https://github.com/ossf/scorecard/blob/main/docs/checks.md#license                |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| 0 / 10  | Maintained             | project was created in last           | https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained             |
|         |                        | 90 days. please review its            |                                                                                   |
|         |                        | contents carefully                    |                                                                                   |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| ?       | Packaging              | packaging workflow not                | https://github.com/ossf/scorecard/blob/main/docs/checks.md#packaging              |
|         |                        | detected                              |                                                                                   |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| 9 / 10  | Pinned-Dependencies    | dependency not pinned by hash         | https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies    |
|         |                        | detected -- score normalized          |                                                                                   |
|         |                        | to 9                                  |                                                                                   |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| 10 / 10 | SAST                   | SAST tool detected: CodeQL            | https://github.com/ossf/scorecard/blob/main/docs/checks.md#sast                   |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| ?       | SBOM                   | internal error:                       | https://github.com/ossf/scorecard/blob/main/docs/checks.md#sbom                   |
|         |                        | RepoClient.ListReleases:              |                                                                                   |
|         |                        | unsupported feature                   |                                                                                   |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| 10 / 10 | Security-Policy        | security policy file detected         | https://github.com/ossf/scorecard/blob/main/docs/checks.md#security-policy        |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| ?       | Signed-Releases        | internal error: unsupported           | https://github.com/ossf/scorecard/blob/main/docs/checks.md#signed-releases        |
|         |                        | feature                               |                                                                                   |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| 10 / 10 | Token-Permissions      | GitHub workflow tokens follow         | https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions      |
|         |                        | principle of least privilege          |                                                                                   |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| 10 / 10 | Vulnerabilities        | 0 existing vulnerabilities            | https://github.com/ossf/scorecard/blob/main/docs/checks.md#vulnerabilities        |
|         |                        | detected                              |                                                                                   |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
| ?       | Webhooks               | internal error: internal error:       | https://github.com/ossf/scorecard/blob/main/docs/checks.md#webhooks               |
|         |                        | Client.Repositories.ListWebhooks      |                                                                                   |
|---------|------------------------|---------------------------------------|-----------------------------------------------------------------------------------|
Error: check runtime error: Branch-Protection: internal error: unsupported feature
2024/12/03 21:08:17 error during command execution: check runtime error: Branch-Protection: internal error: unsupported feature
exit status 1

Still missing:

  • Branch-Protection
  • Contributors
  • SBOM
  • Signed-Releases
  • Webhooks

Signed-off-by: Jamie Magee <[email protected]>
@JamieMagee JamieMagee force-pushed the azure-devops-programming-languages branch from 9704cac to 75b3bf2 Compare December 4, 2024 05:17
clients/azuredevopsrepo/languages.go Outdated Show resolved Hide resolved
clients/azuredevopsrepo/languages.go Show resolved Hide resolved
clients/azuredevopsrepo/languages_test.go Show resolved Hide resolved
clients/azuredevopsrepo/zip.go Outdated Show resolved Hide resolved
Signed-off-by: Jamie Magee <[email protected]>
Copy link
Member

@spencerschrock spencerschrock left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks

@spencerschrock spencerschrock merged commit e94f36d into ossf:main Dec 4, 2024
37 of 38 checks passed
@JamieMagee JamieMagee deleted the azure-devops-programming-languages branch December 5, 2024 00:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

2 participants