Compute dependency stack quality scores for repositories

mayaCostantini commented 2 years ago

Is your feature request related to a problem? Please describe.

As a user of the Thoth GitHub action, I would like to have an overview of my dependencies quality available as a global score and/or multiple scores covering scorecards checks and other quality metrics computed with Thoth's recommendations, displayed as a result of a CI check and eventually on a badge to pin on the landing page of my repository.

Describe the solution you'd like

[ ] Find relevant scores to compute with regards to dependencies health and to the information available in Thoth's knowledge base

and

Provide these dependency stack quality scores to display:

[ ] On a CI check result as a comment on the corresponding pull request. This way, information about dependencies quality will be more visible to users, as they will not need to look at workflow results in the Actions section
[ ] As badges on the main page of the repository with scores for dependencies quality.

Describe alternatives you've considered

Leave the results of the recommendations in the workflow logs.

mayaCostantini commented 2 years ago

/kind feature

sesheta commented 2 years ago

@mayaCostantini: The label(s) kind/feature cannot be applied, because the repository doesn't have them.

In response to [this](https://github.com/thoth-station/thoth-github-action/issues/11#issuecomment-1122742038): >/kind feature Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.

mayaCostantini commented 2 years ago

/assign

mayaCostantini commented 2 years ago

/kind feature

mayaCostantini commented 2 years ago

/sig stack-guidance /priority critical-urgent

mayaCostantini commented 2 years ago

/remove priority-critical-urgent /priority backlog

sesheta commented 1 year ago

Issues go stale after 90d of inactivity. Mark the issue as fresh with /remove-lifecycle stale. Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

/lifecycle stale

harshad16 commented 1 year ago

/remove-lifecycle stale /lifecycle frozen

thoth-station / thoth-github-action

Compute dependency stack quality scores for repositories #11