tarlepp/symfony-flex-backend

View on GitHub
.github/workflows/scorecard.yml

Summary

Maintainability
Test Coverage

Expected an indentation at 4 instead of at 2.
Open

  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained

Expected an indentation at 12 instead of at 10.
Open

          retention-days: 5

Expected an indentation at 8 instead of at 6.
Open

      # Needed to upload the results to code-scanning dashboard.

Expected an indentation at 8 instead of at 6.
Open

      # Needs for private repositories.

Expected an indentation at 12 instead of at 10.
Open

          name: SARIF file

Expected an indentation at 12 instead of at 10.
Open

          # Public repositories:

Expected an indentation at 12 instead of at 10.
Open

          #   - See https://github.com/ossf/scorecard-action#publishing-results.

Expected an indentation at 12 instead of at 10.
Open

          #   - Publish results to OpenSSF REST API for easy access by consumers

Expected an indentation at 12 instead of at 10.
Open

          #   - `publish_results` will always be set to `false`, regardless

Expected an indentation at 12 instead of at 10.
Open

          #   - Allows the repository to include the Scorecard badge.

Expected an indentation at 12 instead of at 10.
Open

          results_format: sarif

Expected an indentation at 12 instead of at 10.
Open

          # To create the PAT, follow the steps in https://github.com/ossf/scorecard-action#authentication-with-pat.

Expected an indentation at 4 instead of at 2.
Open

  push:

Expected an indentation at 12 instead of at 10.
Open

          persist-credentials: false

Expected an indentation at 8 instead of at 6.
Open

      # Used to receive a badge. (Upcoming feature)

Expected an indentation at 8 instead of at 6.
Open

      - name: "Run analysis"

Expected an indentation at 8 instead of at 6.
Open

      # Upload the results to GitHub's code scanning dashboard.

Expected an indentation at 4 instead of at 2.
Open

  # For Branch-Protection check. Only the default branch is supported. See

Expected an indentation at 4 instead of at 2.
Open

  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection

Expected an indentation at 12 instead of at 10.
Open

          # - you want to enable the Branch-Protection check on a *public* repository, or

Expected an indentation at 12 instead of at 10.
Open

          #     of the value entered here.

Expected an indentation at 4 instead of at 2.
Open

  # To guarantee Maintained check is occasionally updated. See

Expected an indentation at 8 instead of at 6.
Open

      # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF

Expected an indentation at 8 instead of at 6.
Open

      # format to the repository Actions tab.

Expected an indentation at 4 instead of at 2.
Open

  schedule:

Expected an indentation at 8 instead of at 6.
Open

      id-token: write

Expected an indentation at 12 instead of at 10.
Open

          publish_results: true

Expected an indentation at 12 instead of at 10.
Open

          sarif_file: results.sarif

Expected an indentation at 4 instead of at 2.
Open

  branch_protection_rule:

Expected an indentation at 8 instead of at 6.
Open

      - name: "Checkout code"

Expected an indentation at 12 instead of at 10.
Open

          # (Optional) "write" PAT token. Uncomment the `repo_token` line below if:

Expected an indentation at 12 instead of at 10.
Open

          # For private repositories:

Expected an indentation at 8 instead of at 6.
Open

      security-events: write

Expected an indentation at 8 instead of at 6.
Open

      actions: read

Expected an indentation at 12 instead of at 10.
Open

          results_file: results.sarif

Expected an indentation at 8 instead of at 6.
Open

      contents: read

Expected an indentation at 8 instead of at 6.
Open

      - name: "Upload artifact"

Expected an indentation at 8 instead of at 6.
Open

      - name: "Upload to code-scanning"

Expected an indentation at 4 instead of at 2.
Open

  # manual button click from the GitHub UI

Expected an indentation at 4 instead of at 2.
Open

  analysis:

Expected an indentation at 12 instead of at 10.
Open

          # repo_token: ${{ secrets.SCORECARD_TOKEN }}

Expected an indentation at 12 instead of at 10.
Open

          path: results.sarif

Expected an indentation at 4 instead of at 2.
Open

  workflow_dispatch:

Expected an indentation at 12 instead of at 10.
Open

          # - you are installing Scorecard on a *private* repository

There are no issues that match your filters.

Category
Status