Skip to content

Commit da89a80

Browse files
docs: update scorecard annotation for last_push_approval (#586)
Reflect that last_push_approval is now enabled (bot approval counts as different user from human pusher). Signed-off-by: JasonXuDeveloper - 傑 <jason@xgamedev.net>
1 parent 25b8922 commit da89a80

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

.scorecard.yml

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -51,9 +51,10 @@ annotations:
5151
# Branch protection: Using GitHub Rulesets with auto-approve bot
5252
# - Rulesets require 1 approver (provided by auto-approve bot)
5353
# - Code owner review is required
54-
# - last_push_approval disabled to allow auto-approve bot to work
55-
# - bypass_actors: [] prevents admin bypass
54+
# - last_push_approval enabled (bot approval counts as different user from pusher)
55+
# - bypass_actors: [] prevents admin bypass (equivalent to "apply to administrators")
56+
# Scorecard may not fully recognize ruleset settings vs classic branch protection
5657
- checks:
5758
- branch-protection
5859
reasons:
59-
- reason: not-applicable # Using Rulesets with auto-approve bot requiring last_push_approval disabled
60+
- reason: not-applicable # Using Rulesets; Scorecard may not recognize all settings

0 commit comments

Comments
 (0)