No feedback on Trusty integration when things are OK

stacklok / minder

Software Supply Chain Security Platform

https://minder-docs.stacklok.dev/

Apache License 2.0

244 stars 34 forks source link

Open puerco opened 3 months ago

puerco commented 3 months ago

When minder inspects a PR with trusty it will provide no feedback when no bad dependencies are found.

We should leverage the checks API to provide visual feedback about the Trusty run and link to a full report about the newly introduced dependencies.

evankanderson commented 2 weeks ago

We probably need some sort of re-design of how PR rules work anyway. We should include the checks API as part of that redesign.

@ethomson -- not sure if this is beta quality bar or not; right now you can't really write a PR check except by extending Minder