Open-CMSIS-Pack / cbuild

Commandline utility to orchestrate the intermediate build steps of CMSIS Build
Apache License 2.0
3 stars 10 forks source link

Update golang linting #217

Closed soumeh01 closed 4 months ago

soumeh01 commented 4 months ago

New and updated action

github-actions[bot] commented 4 months ago

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/EnricoMi/publish-unit-test-result-action 30eadd5010312f995f0d3b3cff7fe2984f69409e :green_circle: 5.6
Details
CheckScoreReason
Code-Review:warning: 0Found 2/30 approved changesets -- score normalized to 0
Maintained:green_circle: 1016 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases:warning: -1no releases found
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Fuzzing:warning: 0project is not fuzzed
Security-Policy:warning: 0security policy file not detected
Vulnerabilities:green_circle: 73 existing vulnerabilities detected
Packaging:green_circle: 10packaging workflow detected
SAST:green_circle: 10SAST tool is run on all commits
Pinned-Dependencies:warning: 2dependency not pinned by hash detected -- score normalized to 2
actions/actions/checkout 0ad4b8fadaa221de15dcec353f45205ec38ea70b :green_circle: 7.6
Details
CheckScoreReason
Code-Review:green_circle: 10all changesets reviewed
Maintained:green_circle: 1020 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Binary-Artifacts:green_circle: 10no binaries found in the repo
Signed-Releases:warning: -1no releases found
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Fuzzing:warning: 0project is not fuzzed
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Security-Policy:green_circle: 9security policy file detected
Packaging:green_circle: 10packaging workflow detected
SAST:green_circle: 10SAST tool is run on all commits
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Pinned-Dependencies:green_circle: 4dependency not pinned by hash detected -- score normalized to 4
actions/actions/download-artifact 65a9edc5881444af0b9093a5e628f2fe47ea3b2e :green_circle: 6.9
Details
CheckScoreReason
Code-Review:green_circle: 10all changesets reviewed
Maintained:green_circle: 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases:warning: -1no releases found
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Packaging:warning: -1packaging workflow not detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Fuzzing:warning: 0project is not fuzzed
Security-Policy:green_circle: 9security policy file detected
SAST:green_circle: 10SAST tool is run on all commits
Pinned-Dependencies:warning: 1dependency not pinned by hash detected -- score normalized to 1
Vulnerabilities:green_circle: 73 existing vulnerabilities detected
actions/actions/setup-go 0c52d547c9bc32b1aa3301fd7a9cb496313a4491 :green_circle: 6
Details
CheckScoreReason
Code-Review:green_circle: 10all changesets reviewed
Maintained:warning: 23 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Packaging:warning: -1packaging workflow not detected
Signed-Releases:warning: -1no releases found
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Fuzzing:warning: 0project is not fuzzed
Security-Policy:green_circle: 9security policy file detected
SAST:green_circle: 8SAST tool is not run on all commits -- score normalized to 8
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities:green_circle: 82 existing vulnerabilities detected
actions/actions/upload-artifact 65462800fd760344b1a7b4382951275a0abb4808 :green_circle: 6.8
Details
CheckScoreReason
Code-Review:green_circle: 9Found 10/11 approved changesets -- score normalized to 9
Maintained:green_circle: 1024 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases:warning: -1no releases found
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Packaging:warning: -1packaging workflow not detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Fuzzing:warning: 0project is not fuzzed
Security-Policy:green_circle: 9security policy file detected
SAST:green_circle: 9SAST tool detected but not run on all commits
Pinned-Dependencies:warning: 1dependency not pinned by hash detected -- score normalized to 1
Vulnerabilities:green_circle: 73 existing vulnerabilities detected
actions/golang/govulncheck-action 3a32958c2706f7048305d5a2e53633d7e37e97d0 :green_circle: 4.2
Details
CheckScoreReason
Code-Review:green_circle: 9Found 11/12 approved changesets -- score normalized to 9
Maintained:warning: 01 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Binary-Artifacts:green_circle: 10no binaries found in the repo
Dangerous-Workflow:warning: -1no workflows found
Token-Permissions:warning: -1No tokens found
Packaging:warning: -1packaging workflow not detected
Pinned-Dependencies:warning: -1no dependencies found
SAST:warning: 0no SAST tool detected
Branch-Protection:warning: 0branch protection not enabled on development/release branches
Fuzzing:warning: 0project is not fuzzed
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Security-Policy:warning: 0security policy file not detected
actions/golangci/golangci-lint-action 82d40c283aeb1f2b6595839195e95c2d6a49081b :green_circle: 5.6
Details
CheckScoreReason
Code-Review:warning: 1Found 2/11 approved changesets -- score normalized to 1
Maintained:green_circle: 1030 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases:warning: -1no releases found
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts:green_circle: 10no binaries found in the repo
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Packaging:warning: -1packaging workflow not detected
Fuzzing:warning: 0project is not fuzzed
Security-Policy:warning: 0security policy file not detected
SAST:green_circle: 10SAST tool is run on all commits
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
actions/paambaati/codeclimate-action b74bb25d2074a4bc16bd06fffc1b299c07b1f886 :green_circle: 3.8
Details
CheckScoreReason
Code-Review:warning: 0Found 0/3 approved changesets -- score normalized to 0
Maintained:green_circle: 1030 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Packaging:warning: -1packaging workflow not detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities:warning: -1internal error: vulnerabilitiesClient.ListUnfixedVulnerabilities: internal error: osv-scanner panic: runtime error: index out of range [0] with length 0
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: 0branch protection not enabled on development/release branches
Fuzzing:warning: 0project is not fuzzed
Security-Policy:warning: 0security policy file not detected
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0

Scanned Manifest Files

.github/workflows/test.yml
  • EnricoMi/publish-unit-test-result-action@30eadd5010312f995f0d3b3cff7fe2984f69409e
  • actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
  • actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e
  • actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
  • actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808
  • golang/govulncheck-action@3a32958c2706f7048305d5a2e53633d7e37e97d0
  • golangci/golangci-lint-action@82d40c283aeb1f2b6595839195e95c2d6a49081b
  • paambaati/codeclimate-action@b74bb25d2074a4bc16bd06fffc1b299c07b1f886
github-actions[bot] commented 4 months ago

Test Results

  4 files  ±0   44 suites  ±0   6s :stopwatch: -1s 201 tests ±0  201 :white_check_mark: ±0  0 :zzz: ±0  0 :x: ±0  804 runs  ±0  804 :white_check_mark: ±0  0 :zzz: ±0  0 :x: ±0 

Results for commit 5f153e6a. ± Comparison against base commit d6bedd29.

:recycle: This comment has been updated with latest results.

codeclimate[bot] commented 4 months ago

Code Climate has analyzed commit 5f153e6a and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 79.3% (0.0% change).

View more on Code Climate.