Should I use publish_results: true in PRs?
#3999
Replies: 1 comment
-
|
Just as a disclaimer: the
one per project (from the default branch), with some history with the optional
The action doesn't have access to the
Some checks have a time-based element: |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
If I use the
ossf/scorecard-actionin a workflow with triggers:do I really want to
publish_results: truefrompull_request:s?That is, are results kept separate per branch or is the database really just one entry per project and the last write wins? If so, then is the obvious repercussion that if a PR has published the most recent results and it has new Scorecard issues in it that are not in master, the Scorecoard for the project now has the score of the PR with new Scorecard issues?
If the above is all true, what is the best practices in this case? Separate workflows for
pull_request:andpush: branches: [master]and/orschedule? Which raises a second, tangential question, if one is publishing on every push to master, does having aschedule:trigger make little (i.e. no) sense?Beta Was this translation helpful? Give feedback.
All reactions