Is repo-audit-action working for anyone? #61

egaspar0 · 2023-03-11T11:16:46Z

egaspar0
Mar 11, 2023

It doesn't seem to pick up any of the rego rulesets.

{
  "version": "2.1.0",
  "$schema": "https://json.schemastore.org/sarif-2.1.0-rtm.5.json",
  "runs": [
    {
      "tool": {
        "driver": {
          "informationUri": "https://github.com/reposaur/reposaur",
          "name": "Reposaur",
          "rules": []
        }
      },
      "results": []
    }
  ]
}

Changing package github.repository to data.repository in my rego loads the rules into the sarif file, but does not seem to return any results.

{
  "version": "2.1.0",
  "$schema": "https://json.schemastore.org/sarif-2.1.0-rtm.5.json",
  "runs": [
    {
      "tool": {
        "driver": {
          "informationUri": "https://github.com/reposaur/reposaur",
          "name": "Reposaur",
          "rules": [
            {
              "id": "repository/violation/empty_description",
              "name": "Repository description is empty",
              "shortDescription": {
                "text": "Repository description is empty"
              },
              "fullDescription": {
                "text": "It's important that repositories have a description. The description helps other people discovering it and understanding its purpose.\n",
                "markdown": "It's important that repositories have a description. The description helps other people discovering it and understanding its purpose.\n"
              },
              "help": {
                "markdown": "It's important that repositories have a description. The description helps other people discovering it and understanding its purpose.\n"
              },
              "properties": {
                "security-severity": "7"
              }
            },
            {
              "id": "repository/violation/at_least_2_topics",
              "name": "Repository doesn't have any topics",
              "shortDescription": {
                "text": "Repository doesn't have any topics"
              },
              "fullDescription": {
                "text": "It's important that repositories have meaningful topics. They help other people discovering it and understanding its purpose.\n",
                "markdown": "It's important that repositories have meaningful topics. They help other people discovering it and understanding its purpose.\n"
              },
              "help": {
                "markdown": "It's important that repositories have meaningful topics. They help other people discovering it and understanding its purpose.\n"
              },
              "properties": {
                "security-severity": "7"
              }
            }
          ]
        }
      },
      "results": []
    }
  ]
}

jcrqr · 2024-10-11T01:35:10Z

jcrqr
Oct 11, 2024
Maintainer

What's the policy you're using?

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Reposaur

Is repo-audit-action working for anyone? #61

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Reposaur

Is repo-audit-action working for anyone? #61

Uh oh!

egaspar0 Mar 11, 2023

Replies: 1 comment

Uh oh!

jcrqr Oct 11, 2024 Maintainer

egaspar0
Mar 11, 2023

jcrqr
Oct 11, 2024
Maintainer