You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Thanks for the automated Scorecard report — keeping our Code-Review score high is an important part of supply-chain security! A score of 8/10 means 4 of the last 30 changesets were merged without an approved review. Could you share (or help identify) which specific changesets those were, so we can determine whether they represent intentional policy exceptions (e.g., bot-authored dependency bumps) or gaps in branch protection rules that need tightening?
Activity
github-actions commentedon Jul 20, 2026
Thanks for the automated Scorecard report — keeping our Code-Review score high is an important part of supply-chain security! A score of 8/10 means 4 of the last 30 changesets were merged without an approved review. Could you share (or help identify) which specific changesets those were, so we can determine whether they represent intentional policy exceptions (e.g., bot-authored dependency bumps) or gaps in branch protection rules that need tightening?
don-petry commentedon Jul 27, 2026
Weekly update: Score is now 7/10. Finding: Found 22/29 approved changesets -- score normalized to 7
don-petry commentedon Aug 3, 2026
Weekly update: Score is now 9/10. Finding: Found 26/28 approved changesets -- score normalized to 9
don-petry commentedon Aug 10, 2026
Resolved! Score is now 10/10 as of 2026-08-10. Finding: all changesets reviewed