Closed stefanb closed 1 month ago
Thank you for issue and instructions. I've set it up, I hope it's OK now.
Thanks! We'll see if it is ok after https://securityscorecards.dev/viewer/?uri=github.com/refaktor/rye is updated next (on a commit to master or on a weekly schedule).
It is better now, but still not ideal:
https://securityscorecards.dev/viewer/?uri=github.com/refaktor/rye doesn't find any branch protection rules:
Linking to https://github.com/ossf/scorecard/blob/7ce8609469289d5f3b1bf5ee3122f42b4e3054fb/docs/checks.md#branch-protection
A quick recipe to fix this: 1) Visit https://github.com/refaktor/rye/settings/rules 2) Add new branch ruleset 3) Give it a name, eg. "default branch protection" 4) Set enforcement to active
5) apply it to default branch
6) Tick checkboxes at
More info about the repository rulesets: https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/about-rulesets