From 1219821a0f7f7db150f86f1f09c962822481e240 Mon Sep 17 00:00:00 2001 From: kt Date: Wed, 9 Sep 2026 18:37:11 -0700 Subject: [PATCH] ci: add OpenSSF Scorecard badge, lowercase workflow names Adds the OpenSSF Scorecard badge to the README badge row and reorders it to match terrafmt (drops the test badge, adds CodeQL). Lowercases all workflow names so the badge labels match. --- .github/workflows/build.yaml | 2 +- .github/workflows/codeql-analysis.yml | 2 +- .github/workflows/pr-depscheck.yaml | 2 +- .github/workflows/pr-golangci-lint.yaml | 2 +- .github/workflows/pr-govulncheck.yaml | 2 +- .github/workflows/pr-tests.yaml | 2 +- .github/workflows/release.yaml | 2 +- .github/workflows/shellcheck.yaml | 2 +- .github/workflows/typos.yaml | 2 +- .github/workflows/workflow-actionlint.yml | 2 +- .github/workflows/workflow-yamllint.yml | 2 +- README.md | 5 +++-- 12 files changed, 14 insertions(+), 13 deletions(-) diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index 6cc58d1..e7fa143 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -1,5 +1,5 @@ --- -name: Build +name: build on: push: branches: [ 'main' ] diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 81724f7..c697b54 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -9,7 +9,7 @@ # the `language` matrix defined below to confirm you have the correct set of # supported CodeQL languages. # -name: CodeQL +name: codeQL on: push: diff --git a/.github/workflows/pr-depscheck.yaml b/.github/workflows/pr-depscheck.yaml index 3702ebe..d6410cb 100644 --- a/.github/workflows/pr-depscheck.yaml +++ b/.github/workflows/pr-depscheck.yaml @@ -1,5 +1,5 @@ --- -name: Vendor Dependencies Check +name: vendor dependencies check on: push: branches: [ 'main' ] diff --git a/.github/workflows/pr-golangci-lint.yaml b/.github/workflows/pr-golangci-lint.yaml index c96efd5..c947c37 100644 --- a/.github/workflows/pr-golangci-lint.yaml +++ b/.github/workflows/pr-golangci-lint.yaml @@ -1,5 +1,5 @@ --- -name: GolangCI Lint +name: golangCI on: push: branches: [ 'main' ] diff --git a/.github/workflows/pr-govulncheck.yaml b/.github/workflows/pr-govulncheck.yaml index 17d3312..f85e037 100644 --- a/.github/workflows/pr-govulncheck.yaml +++ b/.github/workflows/pr-govulncheck.yaml @@ -1,5 +1,5 @@ --- -name: Go Vulnerability Check +name: go vulnerability check on: push: branches: [ 'main' ] diff --git a/.github/workflows/pr-tests.yaml b/.github/workflows/pr-tests.yaml index eea887f..34fb4a9 100644 --- a/.github/workflows/pr-tests.yaml +++ b/.github/workflows/pr-tests.yaml @@ -1,5 +1,5 @@ --- -name: Tests +name: tests on: push: branches: [ 'main' ] diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 1c7e1cf..47c72b0 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -1,5 +1,5 @@ --- -name: Release +name: release on: push: tags: ['v*'] diff --git a/.github/workflows/shellcheck.yaml b/.github/workflows/shellcheck.yaml index 88c9362..29c39f2 100644 --- a/.github/workflows/shellcheck.yaml +++ b/.github/workflows/shellcheck.yaml @@ -1,4 +1,4 @@ -name: ShellCheck +name: shellcheck on: push: branches: [ 'main' ] diff --git a/.github/workflows/typos.yaml b/.github/workflows/typos.yaml index 005a05a..bbc99a1 100644 --- a/.github/workflows/typos.yaml +++ b/.github/workflows/typos.yaml @@ -1,4 +1,4 @@ -name: Typos +name: typos # Spell checks every file in the repo with typos (config in .typos.toml). Complements the misspell # linter in golangci-lint, which only sees Go files. diff --git a/.github/workflows/workflow-actionlint.yml b/.github/workflows/workflow-actionlint.yml index 77a5f42..c3ef0e6 100644 --- a/.github/workflows/workflow-actionlint.yml +++ b/.github/workflows/workflow-actionlint.yml @@ -1,4 +1,4 @@ -name: Workflow Action Lint +name: workflow action lint # Lints .github/workflows/ with rhysd/actionlint (expression/context errors, shellcheck on run: # blocks, action input validation). actionlint is pinned in .tools/go.mod (built by make) so the diff --git a/.github/workflows/workflow-yamllint.yml b/.github/workflows/workflow-yamllint.yml index 5ecde3e..8f79d96 100644 --- a/.github/workflows/workflow-yamllint.yml +++ b/.github/workflows/workflow-yamllint.yml @@ -1,4 +1,4 @@ -name: Workflow YAML Lint +name: workflow YAML lint # Lints the repo's YAML (workflows, configs) with yamllint; rules live in .yamllint.yml. # yamllint is preinstalled on ubuntu-latest and auto-detects GitHub Actions, emitting diff --git a/README.md b/README.md index 97fcdc2..8013ae7 100755 --- a/README.md +++ b/README.md @@ -1,11 +1,12 @@ # tctest [![GitHub release](https://img.shields.io/github/v/release/katbyte/tctest?color=blueviolet)](https://github.com/katbyte/tctest/releases/latest) -[![Go Version](https://img.shields.io/github/go-mod/go-version/katbyte/tctest?color=00ADD8)](https://github.com/katbyte/tctest/blob/main/go.mod) +[![Go Version](https://img.shields.io/github/go-mod/go-version/katbyte/tctest?label=go&color=00ADD8)](https://github.com/katbyte/tctest/blob/main/go.mod) [![License](https://img.shields.io/github/license/katbyte/tctest?color=blue)](https://github.com/katbyte/tctest/blob/main/LICENSE) ![build](https://github.com/katbyte/tctest/actions/workflows/build.yaml/badge.svg) -![test](https://github.com/katbyte/tctest/actions/workflows/pr-tests.yaml/badge.svg) ![lint](https://github.com/katbyte/tctest/actions/workflows/pr-golangci-lint.yaml/badge.svg) +![CodeQL](https://github.com/katbyte/tctest/actions/workflows/codeql-analysis.yml/badge.svg) +[![OpenSSF Scorecard](https://img.shields.io/ossf-scorecard/github.com/katbyte/tctest?label=openSSF)](https://scorecard.dev/viewer/?uri=github.com/katbyte/tctest) A command-line utility to trigger builds in TeamCity to run provider acceptance tests. Given a PR number it can find the files modified, discover the tests to run, and generate a `TEST_PATTERN` automatically.