Skip to content

Scorecard: Code-Review (8/10) #1336

Closed
Closed

Description

@don-petry

OpenSSF Scorecard Finding

Check: Code-Review
Score: 8 / 10
Finding: Found 26/30 approved changesets -- score normalized to 8

Remediation

https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review

Context

This issue was automatically created from an OpenSSF Scorecard scan on 2026-07-20.

Activity

  1. github-actions commented on Jul 20, 2026

    @github-actions
    Contributor

    Thanks for the automated Scorecard report — keeping our Code-Review score high is an important part of supply-chain security! A score of 8/10 means 4 of the last 30 changesets were merged without an approved review. Could you share (or help identify) which specific changesets those were, so we can determine whether they represent intentional policy exceptions (e.g., bot-authored dependency bumps) or gaps in branch protection rules that need tightening?

  2. don-petry commented on Jul 27, 2026

    @don-petry
    CollaboratorAuthor

    Weekly update: Score is now 7/10. Finding: Found 22/29 approved changesets -- score normalized to 7

  3. don-petry commented on Aug 3, 2026

    @don-petry
    CollaboratorAuthor

    Weekly update: Score is now 9/10. Finding: Found 26/28 approved changesets -- score normalized to 9

  4. don-petry commented on Aug 10, 2026

    @don-petry
    CollaboratorAuthor

    Resolved! Score is now 10/10 as of 2026-08-10. Finding: all changesets reviewed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementFeature requestsscorecardOpenSSF Scorecard findingsecuritySecurity-related PRs and issues

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions