Releases | Open Source Science

criticality_score - v2.0.4

This release fixes a bug where the issue lookback duration was 2160 days instead of 90.

What's Changed

Add @latest to go install commands in docs. by @calebbrown in https://github.com/ossf/criticality_score/pull/572
Fix linter issues by @calebbrown in https://github.com/ossf/criticality_score/pull/589
Fix the issue lookback duration to be 90 days. by @calebbrown in https://github.com/ossf/criticality_score/pull/605

Full Changelog: https://github.com/ossf/criticality_score/compare/v2.0.3...v2.0.4

- Go
Published by calebbrown about 2 years ago

criticality_score - v2.0.3

What's Changed

add citation file CITATION.cff by @millecodex in https://github.com/ossf/criticality_score/pull/355
Included Comments for Wam by @nathannaveen in https://github.com/ossf/criticality_score/pull/356
Improve the scorecard version check. by @calebbrown in https://github.com/ossf/criticality_score/pull/373
Update scorecard dependency to v4.10.5 by @calebbrown in https://github.com/ossf/criticality_score/pull/376
Improve the docs for using GCP to clarify the project-ID and fix a broken command. by @calebbrown in https://github.com/ossf/criticality_score/pull/291
Included Tests for internal/signalio/helpers by @nathannaveen in https://github.com/ossf/criticality_score/pull/301
Add a -version flag by @calebbrown in https://github.com/ossf/criticality_score/pull/383
Update the infra to use different auth. Prod uses GH App auth. by @calebbrown in https://github.com/ossf/criticality_score/pull/382
Improve enumerategithub to handle GH errors better. by @calebbrown in https://github.com/ossf/criticalityscore/pull/385
Remove an errant printf and drop replicas before restart. by @calebbrown in https://github.com/ossf/criticality_score/pull/386
Tweaks for the production restart. by @calebbrown in https://github.com/ossf/criticality_score/pull/387
Reduce resources requested by the worker. by @calebbrown in https://github.com/ossf/criticality_score/pull/393
Increase the number of stars for the enumeration to reduce the number of repos. by @calebbrown in https://github.com/ossf/criticality_score/pull/399
Fix usage example url in Readme by @coni2k in https://github.com/ossf/criticality_score/pull/409
Move build vcs code into a package so it can be reused. by @calebbrown in https://github.com/ossf/criticality_score/pull/500
Generalize the iterator implementation and add a batch iterator by @calebbrown in https://github.com/ossf/criticality_score/pull/502
Add a local, single worker implementation of a work loop. by @calebbrown in https://github.com/ossf/criticality_score/pull/505
Adds an init script and image for running collectsignals without GCP PubSub by @calebbrown in https://github.com/ossf/criticalityscore/pull/517
Update k8s config to remove controller and pubsub for local version. by @calebbrown in https://github.com/ossf/criticality_score/pull/521
Fix an off-by-one error with the number of shards written. by @calebbrown in https://github.com/ossf/criticality_score/pull/522
Ensure init is idempotent and doesn't overwrite repo list. by @calebbrown in https://github.com/ossf/criticality_score/pull/524
Add GitHub error type to GraphQL error messages. by @calebbrown in https://github.com/ossf/criticality_score/pull/532
Add support for FORBIDDEN GraphQL responses and simplify errors. by @calebbrown in https://github.com/ossf/criticality_score/pull/533
Update Go version to 1.21 by @calebbrown in https://github.com/ossf/criticality_score/pull/543
Fix a memory leak by removing batch query reflection. by @calebbrown in https://github.com/ossf/criticality_score/pull/547
Tweak the timing of collection and bump number of repos. by @calebbrown in https://github.com/ossf/criticality_score/pull/552
Update go-graphql-client to fix error handling by @calebbrown in https://github.com/ossf/criticality_score/pull/556
Fix the "v2" behavior to match Go's git + mod functionality. by @calebbrown in https://github.com/ossf/criticality_score/pull/563

New Contributors

@millecodex made their first contribution in https://github.com/ossf/criticality_score/pull/355

Full Changelog: https://github.com/ossf/criticality_score/compare/v2.0.2...v2.0.3

- Go
Published by calebbrown over 2 years ago

criticality_score - v2.0.2

Fix SLSA3 provenance workflow.

What's Changed

Switch back to @latest now that we have tagged the most recent Go code. by @calebbrown in https://github.com/ossf/criticality_score/pull/338
Fix broken provenance generation - workflow must use tag. by @calebbrown in https://github.com/ossf/criticality_score/pull/339

Full Changelog: https://github.com/ossf/criticality_score/compare/v2.0.1...v2.0.2

- Go
Published by calebbrown over 3 years ago

criticality_score - v2.0.1

This change fixes an issue where the criticality_score command line tool failed to work correctly on Windows.

What's Changed

Improve input iteration by adding more tests. by @calebbrown in https://github.com/ossf/criticality_score/pull/336
Refactored internal/scorer/scorer by @nathannaveen in https://github.com/ossf/criticality_score/pull/317

Full Changelog: https://github.com/ossf/criticality_score/compare/v2.0.0...v2.0.1

- Go
Published by calebbrown over 3 years ago

criticality_score - v2.0.0

This is the first release of the revamped Criticality Score project.

It is now implemented in Go, rather than Python.

What's Changed

Add a command for enumerating GitHub repos (written in Go) by @calebbrown in https://github.com/ossf/criticality_score/pull/111
Remove "Finished()" API in favor of the io.EOF error. by @calebbrown in https://github.com/ossf/criticality_score/pull/116
Place code to be shared with signal collection into libraries. by @calebbrown in https://github.com/ossf/criticality_score/pull/117
Add a milestone 1 doc. by @calebbrown in https://github.com/ossf/criticality_score/pull/118
Initial commit of the collectsignals command. by @calebbrown in https://github.com/ossf/criticalityscore/pull/120
Fix a div by zero bug when daysSinceCreated == 0, and there are tags. by @calebbrown in https://github.com/ossf/criticality_score/pull/121
Make results/csv thread-safe so it can be used across multiple workers. by @calebbrown in https://github.com/ossf/criticality_score/pull/122
Adds a Resolver for turning a url into a Repo. by @calebbrown in https://github.com/ossf/criticality_score/pull/123
Add support for multiple workers to the signal collection by @calebbrown in https://github.com/ossf/criticality_score/pull/125
Add retry logic for github errors to improve reliability. by @calebbrown in https://github.com/ossf/criticality_score/pull/127
Add deps.dev support to the signal collector. by @calebbrown in https://github.com/ossf/criticality_score/pull/129
Initial import of a scorer command for scoring a csv file of signals. by @calebbrown in https://github.com/ossf/criticality_score/pull/131
Handle the case where GitHub returns 5xx when there are lots of issues by @calebbrown in https://github.com/ossf/criticality_score/pull/135
Improve deps.dev support with new flags and GCP project autodetect by @calebbrown in https://github.com/ossf/criticality_score/pull/146
✨ Enable Scorecard badge by @azeemshaikh38 in https://github.com/ossf/criticality_score/pull/155
Add blob storage support for output. by @calebbrown in https://github.com/ossf/criticality_score/pull/166
Add support for runID in the output filename. by @calebbrown in https://github.com/ossf/criticality_score/pull/167
Allow options to be present in the URL query string. by @calebbrown in https://github.com/ossf/criticality_score/pull/168
Add copyright notice to all files by @calebbrown in https://github.com/ossf/criticality_score/pull/172
Add an initial k8s config for running the enumerategithub tool. by @calebbrown in https://github.com/ossf/criticalityscore/pull/179
Fix the broken GCS link, extend the memory limits. by @calebbrown in https://github.com/ossf/criticality_score/pull/180
Switch to Zap for logging instead of Logrus. by @calebbrown in https://github.com/ossf/criticality_score/pull/182
Add support for output enumerated urls in a scorecard compatible format. by @calebbrown in https://github.com/ossf/criticality_score/pull/195
Migrate the collectsignals tool over to zap for logging. by @calebbrown in https://github.com/ossf/criticalityscore/pull/196
Upgrade to Go 1.19 by @calebbrown in https://github.com/ossf/criticality_score/pull/208
Initial refactoring to support production workers by @calebbrown in https://github.com/ossf/criticality_score/pull/214
Complete refactoring of signal collection logic by @calebbrown in https://github.com/ossf/criticality_score/pull/220
Refactor scoring so it can be done at signal collection time as well. by @calebbrown in https://github.com/ossf/criticality_score/pull/224
Clone new binary criticalityscore from collectsignals. by @calebbrown in https://github.com/ossf/criticality_score/pull/226
Make the output file an explicit flag, rather than a positional arg by @calebbrown in https://github.com/ossf/criticality_score/pull/228
Change how repo URL are input into criticalityscore + and create a docker image by @calebbrown in https://github.com/ossf/criticalityscore/pull/229
Implement the collectsignals worker for productionization. by @calebbrown in https://github.com/ossf/criticalityscore/pull/230
Add marker file support to enumerategithub by @calebbrown in https://github.com/ossf/criticalityscore/pull/231
Add a marker file type to specify how the outfile is written to the marker. by @calebbrown in https://github.com/ossf/criticality_score/pull/233
Make collectsignals Dockerfile work without buildkit by @calebbrown in https://github.com/ossf/criticalityscore/pull/235
Include the job time in the output data for BQ partitioning. by @calebbrown in https://github.com/ossf/criticality_score/pull/236
Add JSON support for outputting signals. by @calebbrown in https://github.com/ossf/criticality_score/pull/237
Enable metric collection for the worker. by @calebbrown in https://github.com/ossf/criticality_score/pull/239
Initial version of kubernetes configs for each service. by @calebbrown in https://github.com/ossf/criticality_score/pull/242
Add support for a text format similar to OG python implementation. by @calebbrown in https://github.com/ossf/criticality_score/pull/243
Make more of the Python impl deprecated. by @calebbrown in https://github.com/ossf/criticality_score/pull/246
Support for CSV dumps from the production worker by @calebbrown in https://github.com/ossf/criticality_score/pull/245
Build a more formal deploy process and improve infra config by @calebbrown in https://github.com/ossf/criticality_score/pull/250
Add the Git commit ID to the data produced by the worker. by @calebbrown in https://github.com/ossf/criticality_score/pull/261
Ensure deps.dev data is fresh for each run of Criticality Score by @calebbrown in https://github.com/ossf/criticality_score/pull/267
Add /tools to dependabot config by @calebbrown in https://github.com/ossf/criticality_score/pull/270
Fixed issue GO-2022-1144 by @nathannaveen in https://github.com/ossf/criticality_score/pull/296
Updated codeql to Include Golang by @nathannaveen in https://github.com/ossf/criticality_score/pull/295
Updated docs for scorer input by @nathannaveen in https://github.com/ossf/criticality_score/pull/284
Add Milestone 2 documentation. by @calebbrown in https://github.com/ossf/criticality_score/pull/175
Removed GlobalRegistry from registry.go by @nathannaveen in https://github.com/ossf/criticality_score/pull/316
Provide working installation instructions by @jberryman in https://github.com/ossf/criticality_score/pull/320
Refactored Score in wam.go by @nathannaveen in https://github.com/ossf/criticality_score/pull/315
Refactored internal/collector/depsdev/source by @nathannaveen in https://github.com/ossf/criticality_score/pull/324
Included Wrapcheck linter by @nathannaveen in https://github.com/ossf/criticality_score/pull/327
Setup goreleaser to generate Go binaries. by @calebbrown in https://github.com/ossf/criticality_score/pull/331
Remove deprecated Python implementation from main branch. by @calebbrown in https://github.com/ossf/criticality_score/pull/333

New Contributors

@azeemshaikh38 made their first contribution in https://github.com/ossf/criticality_score/pull/155
@nathannaveen made their first contribution in https://github.com/ossf/criticality_score/pull/247
@jberryman made their first contribution in https://github.com/ossf/criticality_score/pull/320

Full Changelog: https://github.com/ossf/criticality_score/compare/v1.0.7...v2.0.0

- Go
Published by calebbrown over 3 years ago

criticality_score - Python Deprecation

This release officially deprecates the Python implementation.

Any future work should be directed towards the Go implementation on the main branch.

This release also wraps up all the work done since v1.0.7 was released.

What's Changed

Make language parameter optional by @coni2k in https://github.com/ossf/criticality_score/pull/60
Create .gitignore file by @coni2k in https://github.com/ossf/criticality_score/pull/62
output folder update by @coni2k in https://github.com/ossf/criticality_score/pull/61
Bump pythonrequires to 3.6 by @Yikun in https://github.com/ossf/criticalityscore/pull/65
Add logging to generate script by @coni2k in https://github.com/ossf/criticality_score/pull/66
Update format of generate script console output by @coni2k in https://github.com/ossf/criticality_score/pull/67
Make sure criticalityscore between 0 and 1 by @Yikun in https://github.com/ossf/criticalityscore/pull/69
Create codeql-analysis.yml by @naveensrinivasan in https://github.com/ossf/criticality_score/pull/72
Add .ropeproject folder to gitignore by @coni2k in https://github.com/ossf/criticality_score/pull/74
Refactor getgithubauthtoken by @coni2k in https://github.com/ossf/criticalityscore/pull/71
Correlation between Criticality Score and Popularity by @nuthanmunaiah in https://github.com/ossf/criticality_score/pull/77
Handle not found cases by @coni2k in https://github.com/ossf/criticality_score/pull/80
Fix pylint messages by @coni2k in https://github.com/ossf/criticality_score/pull/81
Add logger to run script by @coni2k in https://github.com/ossf/criticality_score/pull/83
Add page query retries when no match by @Yikun in https://github.com/ossf/criticality_score/pull/79
Fix regex to cover '1 commit result' case by @Yikun in https://github.com/ossf/criticality_score/pull/78
Update Readme file to include "all.csv" by @coni2k in https://github.com/ossf/criticality_score/pull/84
Create Dependabot config file by @naveensrinivasan in https://github.com/ossf/criticality_score/pull/86
Handle empty repo case by @coni2k in https://github.com/ossf/criticality_score/pull/85
Update Readme by @coni2k in https://github.com/ossf/criticality_score/pull/89
Handle gettags exception by @coni2k in https://github.com/ossf/criticalityscore/pull/87
Support generation via github orgs. by @inferno-chromium in https://github.com/ossf/criticality_score/pull/91
Fix a hang bug with few commits repo. by @inferno-chromium in https://github.com/ossf/criticality_score/pull/92
Use auth header when doing dependents query, avoid rate limit. by @inferno-chromium in https://github.com/ossf/criticality_score/pull/93
Add Watchers/Description Metrics by @dilanbhalla in https://github.com/ossf/criticality_score/pull/95
add support for R language by @i2z1 in https://github.com/ossf/criticality_score/pull/101
Allow overriding default parameters by @lehors in https://github.com/ossf/criticality_score/pull/105
Support for local csv file as input by @CannedFish in https://github.com/ossf/criticality_score/pull/106

New Contributors

@Yikun made their first contribution in https://github.com/ossf/criticality_score/pull/65
@naveensrinivasan made their first contribution in https://github.com/ossf/criticality_score/pull/72
@nuthanmunaiah made their first contribution in https://github.com/ossf/criticality_score/pull/77
@dilanbhalla made their first contribution in https://github.com/ossf/criticality_score/pull/95
@i2z1 made their first contribution in https://github.com/ossf/criticality_score/pull/101
@lehors made their first contribution in https://github.com/ossf/criticality_score/pull/105
@CannedFish made their first contribution in https://github.com/ossf/criticality_score/pull/106

Full Changelog: https://github.com/ossf/criticality_score/compare/v1.0.7...v1.0.8

- Go
Published by calebbrown over 3 years ago