Repository navigation
Update OpenSSF Scorecard project details - #16140
justaugustus wants to merge 2 commits into
Conversation
Signed-off-by: Stephen Augustus <[email protected]>
Signed-off-by: Stephen Augustus <[email protected]>
|
Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA). View this failed invocation of the CLA check for more information. For the most up to date status, view the checks section at the bottom of the pull request. |
|
justaugustus is a new contributor to projects/scorecard-web. The PR must be approved by known contributors before it can be merged. The past contributors are: hunsche, naveensrinivasan |
|
@justaugustus If the code is still part of the same Scorecard project but just split in different code repositories, the OSS-Fuzz integration should still be a single integration and not two separate integrations (directories in |
The e2e Fuzzing check test against ossf/scorecard-webapp expected 3 info messages (1 for OSS-Fuzz integration, 2 for native Go fuzz functions). The native fuzz functions (FuzzVerifyWorkflow, FuzzExtractCertInfo) have since moved to ossf/scorecard-infra, so the check now correctly reports only the OSS-Fuzz integration signal. Note: OSS-Fuzz's status.json does not yet track ossf/scorecard-infra as a project (see google/oss-fuzz#16140, unmerged), so this expected value may need to change again once that lands. Assisted-by: LLM Signed-off-by: Stephen Augustus <[email protected]>
We recently moved our API server code to another repository, so this is an update to the references to get fuzzing working again.
Companion to ossf/scorecard-infra#93.
While I was here, I've updated the maintainer refs and other attributes.
cc: @AdamKorcz @spencerschrock @jeffmendoza