search

ossf / scorecard-webapp

Website and API for OpenSSF Scorecard
https://scorecard.dev
Apache License 2.0
22 stars 27 forks source link

BUG: report not found #692

Open chimera97 opened 5 months ago

chimera97 commented 5 months ago

Describe the bug 2 of 20 attempts to look up scorecards for different dependencies failed, getting consistent error for the 2 dependencies that the report is not found.

Reproduction steps Steps to reproduce the behavior:

  1. Visit github.com/bugsnag/bugsnag-android-performance to confirm the repository exists. Visit https://scorecard.dev/viewer/?uri=github.com/bugsnag/bugsnag-android-performance to observe corresponding scorecard is not found.
  2. Visit github.com/bincode-org/bincode to confirm the repository exists. Visit https://scorecard.dev/viewer/?uri=github.com/bincode-org/bincode to observe corresponding scorecard is not found.

Expected behavior A scorecard report is available. Alternatively, a more detailed reason of why the scorecard is not found, and how to remediate that issue.

Additional context None.

pnacht commented 4 months ago

The report is only available for projects that either have the Scorecard Action installed or which have been added to Scorecard's weekly scan.

chimera97 commented 4 months ago

Thanks. Could scorecard then just report the above info along with the message of report not being found? Also is the recommendation to update the weekly scan list or to ask each of the repo's to install/configure scorecard-action?