allstar: Add initial config for Allstar GitHub App (#39)

* allstar: Add initial config for Allstar GitHub App * allstar: Add initial config for OpenSSF Scorecard checks --------- Signed-off-by: Stephen Augustus <[email protected]>
uwu-tools · May 28, 2024 · 1952b22 · 1952b22
1 parent 006dc19
commit 1952b22
Show file tree

Hide file tree

Showing 6 changed files with 38 additions and 0 deletions.
diff --git a/allstar/allstar.yaml b/allstar/allstar.yaml
@@ -0,0 +1,2 @@
+optConfig:
+ optOutStrategy: true
diff --git a/allstar/binary_artifacts.yaml b/allstar/binary_artifacts.yaml
@@ -0,0 +1,3 @@
+optConfig:
+ optOutStrategy: true
+action: issue
diff --git a/allstar/branch_protection.yaml b/allstar/branch_protection.yaml
@@ -0,0 +1,3 @@
+optConfig:
+ optOutStrategy: true
+action: issue
diff --git a/allstar/outside.yaml b/allstar/outside.yaml
@@ -0,0 +1,3 @@
+optConfig:
+ optOutStrategy: true
+action: issue
diff --git a/allstar/scorecard.yaml b/allstar/scorecard.yaml
@@ -0,0 +1,24 @@
+optConfig:
+ optOutStrategy: true
+action: issue
+checks:
+- "Binary-Artifacts"
+- "Branch-Protection"
+- "CI-Tests"
+- "CII-Best-Practices"
+- "Code-Review"
+- "Contributors"
+- "Dangerous-Workflow"
+- "Dependency-Update-Tool"
+- "Fuzzing"
+- "License"
+- "Maintained"
+- "Packaging"
+- "Pinned-Dependencies"
+- "SAST"
+- "SBOM"
+- "Security-Policy"
+- "Signed-Releases"
+- "Token-Permissions"
+- "Vulnerabilities"
+- "Webhooks"
diff --git a/allstar/security.yaml b/allstar/security.yaml
@@ -0,0 +1,3 @@
+optConfig:
+ optOutStrategy: true
+action: issue