ossf / scorecard

OpenSSF Scorecard - Security health metrics for Open Source
https://scorecard.dev
Apache License 2.0
4.46k stars 489 forks source link

restore ability to see individual PR results for SAST and Code-Review and document it #4245

Open spencerschrock opened 2 months ago

spencerschrock commented 2 months ago

You used to be able to --show-details --verbosity debug to see which individual PRs were detected for SAST or Code Review (see https://github.com/ossf/scorecard/issues/4237#issuecomment-2227104276).

In the transition to Structured Results, this ability was lost, but there's still troubleshooting value in being able to do this. It would be nice to switch the behavior back and document it. The probes were marked experimental in #4242 (before the v5 release) so we can make this change.