FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

ossf scorecard best practices by johnandersen777 · Pull Request #1613 · intel/dffml · GitHub

This repository was archived by the owner on Aug 25, 2024. It is now read-only.
/ dffml Public archive

ossf scorecard best practices - #1613

Draft
johnandersen777 wants to merge 4 commits into
intel:mainfrom
johnandersen777:ossf-scorecard-best-practices
Draft

ossf scorecard best practices#1613
johnandersen777 wants to merge 4 commits into
intel:mainfrom
johnandersen777:ossf-scorecard-best-practices

Conversation

Copy link
Copy Markdown
  • Revert "best practices: oss scorecard: pindeps: Commit requirements-lock.txt files"
  • best practices: ossf scorecard: Fix pinning per Pedro suggestion with --require-hashes
  • best practices: oss scorecard: pindeps: Commit requirements-lock.txt files with pip install --require-hashes
  • best practices: oss scorecard: pindeps: Use --no-deps on editable installs

John Andersen and others added 4 commits June 24, 2024 09:18
… --require-hashes

Related: ossf/scorecard#4189 (comment)
Signed-off-by: John Andersen <john.s.andersen@intel.com>
…files with pip install --require-hashes

Signed-off-by: John Andersen <johnandersenpdx@gmail.com>
…talls

Signed-off-by: John Andersen <johnandersenpdx@gmail.com>

github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

LGTM

This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants


Back | FazBrowse Home | New Git URL