Skip to content

Feature: Improve --show-details for Pinned-Dependencies when a certain type of file doesn't exist #2679

@pnacht

Description

@pnacht

Is your feature request related to a problem? Please describe.
The Pinned-Dependencies check scans three types of files: workflows, Dockerfiles and shell scripts. If a certain type of file doesn't exist, --show-details outputs the same thing as if there was such a file and it was correctly pinned.

For example, a repo with no Dockerfiles gets: Info: Dockerfile dependencies are pinned Info: no insecure (not pinned by hash) dependency downloads found in Dockerfiles.

Describe the solution you'd like
When there are no files of a certain class, --show-details should say so: Info: No Dockerfile found.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions