Skip to content

Commit dcdf05a

Browse files
halnasriErikhu1halnasriLucaFgrLucaFue
authored
Resolve TA-ANALYSIS Feedback and Adapt nlohmann pipeline to check s-core matrix specification (#16)
* Halnasri resolve tt confidence feedback (#21) * Resolve TT-CHANGES feedback (nlohmann#115) * enhaced doc in concept.rst * enhanced documentation of the scoring * review comments fixed and Example claculating graph added * Added AOUs to TA-CONSTRAINTS * add CI workflow for checking SME reviews (nlohmann#110) * add CI workflow for checking SME reviews * give pull request read permission * fix indentation * fix typo * fix typo * fix artifact collection trigger * reformulate JLS-05 * removed AOUs from non-TA-CONSTRAINTS links * align with current state of working branch * again * enhaced doc in concept.rst * enhanced documentation of the scoring * review comments fixed and Example claculating graph added * unfinished commit * Adapted overall statement formulation * remove WFJ-12 whitespace * Added "provided by nlohmann/json" to WFJ-07 * removed "library" from TA-METHODOLOGIES * Added nlohmann/json to TT-CONSTRUCTION * fix typo in NPF-01 * fixed score -> score-json in TT-CONFIDENCE * Clarify reference to nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify confidence measurement in nlohmann/json Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Fix typo in TA-FIXES.md regarding repository name Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify reference to nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Fix typo in TA-ITERATIONS.md Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Fix typo in TA-ITERATIONS.md Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify reference to nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify reference to nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify release construction for nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify source mirroring for nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify reference to nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update wording for nlohmann/json library reference Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify reporting of score-json implementation issues Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify dependency storage requirements for nlohmann/json Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify reference to nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify usage of nlohmann/json library in AOU-19 Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify wording on bug review for nlohmann/json Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify reference to nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify service name in NJF-02.md Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify reference to nlohmann/json library in NJF-03 Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify service description in NJF-04.md Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * changed "service provided by" convention * Fix reference to score-json in AOU-08.md Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/statements/JLS-24.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/tenets/TT-CHANGES.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/tenets/TT-RESULTS.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/tenets/TT-PROVENANCE.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/tenets/TT-EXPECTATIONS.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/tenets/TT-CONSTRUCTION.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/tenets/TT-CONFIDENCE.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/statements/JLS-25.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update JLS-14.md Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Fix merge conflict in JLS-05.md Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/assumptions-of-use/AOU-17.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Implemented custom include_list reference * Removed JLS-27 and its link, added JLS-34 and its link to TA-FIXES * added README documentation for IncludeListReference * changed __str__ method of IncludeListReference to more descriptive title * removed method doc for as_markdown in IncludeListReference * changed __str__ of IncludeListReference * reworked content method in IncludeListReference * small change to README * Update TSF/trustable/statements/JLS-34.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Erikhu1 new tsf items (nlohmann#125) * change AOU-27 * add new statements * update JLS-05 * add release notes reference to JLS-05 * remove internal comment * separate CVE triaging into own statement * update JLS-05 * name specific branch instead of default * split JLS-06 * fix typos * remove unnecessary evidence config * change reference type of release notes * update JLS-19 * specify repo * update JLS-05 * update JLS-06 and JLS-35 * delete non ta-constraints AOU links * Update TSF/trustable/statements/JLS-05.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-11.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-19.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-28.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-29.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-30.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-31.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-32.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-33.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * add some references and scores * remove comment * update aou-29 * fix test_str_include_list test reference * add reference to JLS-25 * add reference to JLS-02 * add reference to JLS-06 * update JLS-26 * add reference to JLS-29 * add reference to JLS-30 * update score for JLS-30 * update JLS-35 * Update TSF/trustable/statements/JLS-28.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-29.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-30.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * remove duplicate statement * Update TSF/trustable/statements/JLS-29.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * add statement for SAST * add link for JLS-34 * add score on JLS-32 * add score on JLS-33 * add score on JLS-34 * update JLS-26 * fix typo * add missing quotation marks --------- Signed-off-by: Erik Hu <erik.hu@d-fine.com> Co-authored-by: Luca Füger <luca.fueger@d-fine.com> * delete unused items * fix post create script * fix typos * re-add JLS-27 * remove duplicated tests * update concept section * clean up * corrected on item in the table and change the example in the graph * fix typos in concept * score --> trustable score * .png --> .svg * 0.81 # Conflicts: # TSF/docs/score_calculation_example.svg * add support of fork PRs * newline EOF * fix typo * add reference to JLS-30 * add reference to JLS-11 * change repo names * fix typo * reformulate AOU-05 * clarify AOU-10 * update JLS-01 * update JLS-35 * update JLS-35 * udpate JLS-05 * add evidence to JLS-07 * update JLS-12 * Changed all statement occurrences of score-json to eclipse-score/inc_nlohmann_json * Restored JLS-05 and JLS-27 tto pre-commit state * fix typo * Update TSF/trustable/no-json-faults/NJF-06.6.0.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> --------- Signed-off-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: Luca <luca.fueger@d-fine.com> * add context files (#5) * add context files * remove references to checklist files * add answer fields * explain component evidence * cleanup * update to trudag v2025.10.22 (#4) * update to trudag v2025.10.22 * upgrade pip * upgrade pip in test_publication workflow * pip install requests * adding new statements to TA-METHODOLOGIES and fixing statements from TA-CONFIDENCE * added references to JLS 40 and 42 * Update TSF/trustable/statements/JLS-43.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/trustable/statements/JLS-42.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/trustable/statements/JLS-37.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/trustable/statements/JLS-09.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/trustable/statements/JLS-08.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * changed JLS08 to be more clear * corrected the statement of JLS-37 * corrected the statement of JLS-41 * corrected the file path in JLS-36 * reformulated the statement JLS-41 * split the statement of JLS-40 into tow * only one valitator * more clear statement in JLS-41 * ' * added a reference to JLS-13 and reformulated the statement * added answers to the evidence lists and to the checklists of TA-CONFIDENCE and TA-METHODOLOGIES * fixed TA-CONFIDENCE * fixed TA-METHODOLOGIES * . * corrected JLS-13 * typo * added new reference to JLS-08 * edited one answer of TA-Methodologies context file * Update TSF/trustable/statements/JLS-08.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/trustable/statements/JLS-08.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Add https evidence Added evidence configuration for response time and URL. Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Fix formatting in JLS-08.md Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Re add AOU-30 Signed-off-by: Erik Hu <erik.hu@d-fine.com> --------- Signed-off-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: Luca <luca.fueger@d-fine.com> * Resolve TT-CONSTRUCTION Feedback (#23) * Moving changes from json to inc_nlohmann_json * Added checklist and evidence for TA-RELEASES * Worked through TA-Iterations checklist and evidence * added checklist and evidence for TA-TESTS * fix smaller details * Update TSF/trustable/assertions/TA-ITERATIONS_CONTEXT.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/assertions/TA-ITERATIONS_CONTEXT.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/assertions/TA-RELEASES_CONTEXT.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * resolved "binary" checklist points * Added JLS-52 * added references for newly created JLS-52 * Update TSF/trustable/statements/JLS-52.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * added verbose file reference to JLS-51 * Update TSF/trustable/statements/JLS-51.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * deleted AOU-08 checklist references * added JLS-51 link to TA-ITERATIONS, removed link to TA-RELEASES * deleted JLS-21 including its links * deleted JLS-21 * removed link TA-ITERATIONS -> JLS-51 * filled in JLS-53 * comments * added TA-Releases checklist answer * changed target to target_seconds * Update TSF/trustable/assertions/TA-RELEASES_CONTEXT.md Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * fixes for JLS-16 * adapted JLS-53 formulation * fix for JLS-16 * Added item reference to JLS-53 * Update TA-RELEASES_CONTEXT.md Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * created further statements * Update TSF/trustable/statements/JLS-61.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> * Update TSF/trustable/statements/JLS-61.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> * Update TSF/trustable/statements/JLS-61.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> * Update TSF/trustable/statements/JLS-61.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> * added link from JLS-53 to JLS-14 and restructured JLS-52 * Provided evidence for JLS-63 * changed JLS-52, JLS-64 and JLS-65 formulation * smaller changes * Added references to JLS-65 * changed JLS-63 reference types * ... * completed JLS-64 * adding response time validator to JLS-64 * specifying remaining TODOs * Specify remaining work #2 * deleted JLS-66 * reworked JLS-62 and deleted 46 and 66 * adapted TA-TESTS_CONTEXT * fixed JLS-62 * Update TSF/trustable/assertions/TA-RELEASES_CONTEXT.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> * Update TSF/trustable/assertions/TA-RELEASES_CONTEXT.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> * Update TSF/trustable/statements/JLS-16.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> * added non_reproducible_tests and its reference to JLS-62 --------- Signed-off-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> Co-authored-by: LucaFgr <luca.fueger@d-fine.com> Co-authored-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: LucaFue <luca.fueger@d-fine.de> * Erikhu1 add missing links (nlohmann#25) * add missing links * fix faulty reference * Reference corrections (#19) * link TA-BEHAVIOURS to JLS-27 (#9) * update JLS-01 * update JLS-05 * update JLS-11 * update JLS-12 * update JLS-29 * update JLS-30 * update JLS-35 * remove duplicate link * Resolve TT-PROVENANCE Feedback (#14) * added checklist items to TA_INPUTS * move TSF instructions * add JLS-47 and link TA-INPUTS to JLS-34 * create JLS-48 * update TA-INPUTS context * update TA-INPUTS context * add JLS-49 * update inputs context * pin third party tools list to 3.12.0 * add JLS-50 and assessment of third party tools * update TA-INPUTS context * add reference to JLS-49 * link TA-RELEASES -> JLS-49 * Enhance third-party tools assessment documentation (#18) * Enhance third-party tools assessment documentation Expanded the assessment details for various third-party tools used in nlohmann/json Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Enhance documentation for third-party tools assessment 2 Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Enhance third-party tools assessment details 3 Added comprehensive descriptions for Hedley, lcov, libFuzzer, Material for MkDocs, MkDocs, OSS-Fuzz, Probot, and Valgrind. Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Revise risk categorization and tool assessment details Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * small fixes Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/docs/third_party_tools_assessment.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/docs/third_party_tools_assessment.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/docs/third_party_tools_assessment.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/docs/third_party_tools_assessment.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/docs/third_party_tools_assessment.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/docs/third_party_tools_assessment.md typos Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * typo Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * rename link Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * typo Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * typo - Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Enhance OSS-Fuzz section with issue links Updated the OSS-Fuzz role description to include links to specific GitHub issues. Signed-off-by: halnasri <hatem.alnasri@d-fine.com> --------- Signed-off-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: Erik Hu <erik.hu@d-fine.com> * add links from TA-SUPPLYCHAIN * add answer to supply chain context * remove dead link * create JLS-66 * link JLS-66 * finish answer SUPPLY_CHAIN context * misc fixes * misc fixes * misc fixes * Update TSF/trustable/assertions/TA-SUPPLY_CHAIN_CONTEXT.md Co-authored-by: LucaFue <luca.fueger@d-fine.de> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * misc fixes * update JLS-49 * Update TSF/README.md Co-authored-by: halnasri <hatem.alnasri@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> --------- Signed-off-by: halnasri <hatem.alnasri@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> Co-authored-by: erikhu1 <erik.hu@d-fine.com> Co-authored-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: LucaFue <luca.fueger@d-fine.de> * halnasri-Revisit TT-RESULTS (#17) * revisit TT-RESULTS * rebase * resolve conflict * fixing some typos * AoU --> AOU * reformulated JLS-22 and completed the checklist of TA-DATA * Update TSF/trustable/statements/JLS-17.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Fix typo in 'misbehaviours' in documentation Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Fix typo in file path for nlohmann misbehaviours Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Clarify answers in TA-ANALYSIS_CONTEXT.md Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * adress comment of TA-DATA context file * fixed some issues in the TA-ANALYSIS context file * typo in JLS-17 * added a reference to TA-ANALYSIS_CONTEXT.md * added some answers to the checklist of TA-VALIDATION * fix typos Co-authored-by: LucaFue <luca.fueger@d-fine.de> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * added one answer to the TA-VALIDATION and fixed typos * answered checklist questions of TA-VALIDATION * reformulated JLS-17 and added the failure rate analysis * fix some checklist questions * typo * typos * typos and rewrite JLS 17 * Update TSF/trustable/assertions/TA-ANALYSIS_CONTEXT.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/trustable/assertions/TA-ANALYSIS_CONTEXT.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * link formating Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * link formating Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> --------- Signed-off-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: Erik Hu <erik.hu@d-fine.com> Co-authored-by: LucaFue <luca.fueger@d-fine.de> * added TA-Releases -> JLS-53 link (nlohmann#27) Co-authored-by: LucaFgr <luca.fueger@d-fine.com> * bump urllib3 version from 2.5.0 to 2.6.0 (nlohmann#26) * bump urllib3 version from 2.5.0 to 2.6.0 * nitpick EOF line * Erikhu1 sync with prod (nlohmann#31) * Adding scores for TT-Changes * fix validators function signature * add new trudag dependencies * set review status of reviewed items again * fix outdated dependency --------- Co-authored-by: aschemmel-git <alexander.schemmel@bmw.de> * Halnasri fix statements (nlohmann#30) * fix JLS-08 * fix JLS-08 and JLS-10 * fix JLS-20 * fix JLS-11 and JLS-28 * fix JLS-16 * 2.0 --> 2 * Update JLS-11 * fix JLS-27 * fix JLS-65 * fix JLS-63 * added JLS-19 to build instructions * lcov and coverity * added clang-tidy * removed one validator from JLS-16 * fix lcov and coverity part * edited reference type for scorecard and inrospector * fix JLS-02 * Removed multiple validators from statements by splitting them up (nlohmann#35) * removed multiple validators from statements by splitting them up * removed combinator validator * fix JLS-11 * Update TSF/trustable/statements/JLS-58.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> * newline EOF * readded scores for JLS-11 --------- Signed-off-by: LucaFue <luca.fueger@d-fine.de> Co-authored-by: LucaFgr <luca.fueger@d-fine.com> Co-authored-by: Erik Hu <erik.hu@d-fine.com> * Erikhu1 sync with prod (nlohmann#38) * Adding scores for TT-Changes * Update 4 trustable tenets (#9) * Halnasri resolve tt confidence feedback (#21) * Resolve TT-CHANGES feedback (nlohmann#115) * enhaced doc in concept.rst * enhanced documentation of the scoring * review comments fixed and Example claculating graph added * Added AOUs to TA-CONSTRAINTS * add CI workflow for checking SME reviews (nlohmann#110) * add CI workflow for checking SME reviews * give pull request read permission * fix indentation * fix typo * fix typo * fix artifact collection trigger * reformulate JLS-05 * removed AOUs from non-TA-CONSTRAINTS links * align with current state of working branch * again * enhaced doc in concept.rst * enhanced documentation of the scoring * review comments fixed and Example claculating graph added * unfinished commit * Adapted overall statement formulation * remove WFJ-12 whitespace * Added "provided by nlohmann/json" to WFJ-07 * removed "library" from TA-METHODOLOGIES * Added nlohmann/json to TT-CONSTRUCTION * fix typo in NPF-01 * fixed score -> score-json in TT-CONFIDENCE * Clarify reference to nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify confidence measurement in nlohmann/json Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Fix typo in TA-FIXES.md regarding repository name Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify reference to nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Fix typo in TA-ITERATIONS.md Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Fix typo in TA-ITERATIONS.md Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify reference to nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify reference to nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify release construction for nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify source mirroring for nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify reference to nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update wording for nlohmann/json library reference Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify reporting of score-json implementation issues Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify dependency storage requirements for nlohmann/json Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify reference to nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify usage of nlohmann/json library in AOU-19 Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify wording on bug review for nlohmann/json Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify reference to nlohmann/json library Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify service name in NJF-02.md Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify reference to nlohmann/json library in NJF-03 Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Clarify service description in NJF-04.md Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * changed "service provided by" convention * Fix reference to score-json in AOU-08.md Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/statements/JLS-24.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/tenets/TT-CHANGES.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/tenets/TT-RESULTS.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/tenets/TT-PROVENANCE.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/tenets/TT-EXPECTATIONS.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/tenets/TT-CONSTRUCTION.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/tenets/TT-CONFIDENCE.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/statements/JLS-25.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update JLS-14.md Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Fix merge conflict in JLS-05.md Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/assumptions-of-use/AOU-17.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Implemented custom include_list reference * Removed JLS-27 and its link, added JLS-34 and its link to TA-FIXES * added README documentation for IncludeListReference * changed __str__ method of IncludeListReference to more descriptive title * removed method doc for as_markdown in IncludeListReference * changed __str__ of IncludeListReference * reworked content method in IncludeListReference * small change to README * Update TSF/trustable/statements/JLS-34.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Erikhu1 new tsf items (nlohmann#125) * change AOU-27 * add new statements * update JLS-05 * add release notes reference to JLS-05 * remove internal comment * separate CVE triaging into own statement * update JLS-05 * name specific branch instead of default * split JLS-06 * fix typos * remove unnecessary evidence config * change reference type of release notes * update JLS-19 * specify repo * update JLS-05 * update JLS-06 and JLS-35 * delete non ta-constraints AOU links * Update TSF/trustable/statements/JLS-05.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-11.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-19.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-28.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-29.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-30.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-31.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-32.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-33.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * add some references and scores * remove comment * update aou-29 * fix test_str_include_list test reference * add reference to JLS-25 * add reference to JLS-02 * add reference to JLS-06 * update JLS-26 * add reference to JLS-29 * add reference to JLS-30 * update score for JLS-30 * update JLS-35 * Update TSF/trustable/statements/JLS-28.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-29.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * Update TSF/trustable/statements/JLS-30.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * remove duplicate statement * Update TSF/trustable/statements/JLS-29.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * add statement for SAST * add link for JLS-34 * add score on JLS-32 * add score on JLS-33 * add score on JLS-34 * update JLS-26 * fix typo * add missing quotation marks --------- Signed-off-by: Erik Hu <erik.hu@d-fine.com> Co-authored-by: Luca Füger <luca.fueger@d-fine.com> * delete unused items * fix post create script * fix typos * re-add JLS-27 * remove duplicated tests * update concept section * clean up * corrected on item in the table and change the example in the graph * fix typos in concept * score --> trustable score * .png --> .svg * 0.81 # Conflicts: # TSF/docs/score_calculation_example.svg * add support of fork PRs * newline EOF * fix typo * add reference to JLS-30 * add reference to JLS-11 * change repo names * fix typo * reformulate AOU-05 * clarify AOU-10 * update JLS-01 * update JLS-35 * update JLS-35 * udpate JLS-05 * add evidence to JLS-07 * update JLS-12 * Changed all statement occurrences of score-json to eclipse-score/inc_nlohmann_json * Restored JLS-05 and JLS-27 tto pre-commit state * fix typo * Update TSF/trustable/no-json-faults/NJF-06.6.0.md Co-authored-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> --------- Signed-off-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: Luca <luca.fueger@d-fine.com> * add context files (#5) * add context files * remove references to checklist files * add answer fields * explain component evidence * cleanup * update to trudag v2025.10.22 (#4) * update to trudag v2025.10.22 * upgrade pip * upgrade pip in test_publication workflow * pip install requests * adding new statements to TA-METHODOLOGIES and fixing statements from TA-CONFIDENCE * added references to JLS 40 and 42 * Update TSF/trustable/statements/JLS-43.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/trustable/statements/JLS-42.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/trustable/statements/JLS-37.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/trustable/statements/JLS-09.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/trustable/statements/JLS-08.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * changed JLS08 to be more clear * corrected the statement of JLS-37 * corrected the statement of JLS-41 * corrected the file path in JLS-36 * reformulated the statement JLS-41 * split the statement of JLS-40 into tow * only one valitator * more clear statement in JLS-41 * ' * added a reference to JLS-13 and reformulated the statement * added answers to the evidence lists and to the checklists of TA-CONFIDENCE and TA-METHODOLOGIES * fixed TA-CONFIDENCE * fixed TA-METHODOLOGIES * . * corrected JLS-13 * typo * added new reference to JLS-08 * edited one answer of TA-Methodologies context file * Update TSF/trustable/statements/JLS-08.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/trustable/statements/JLS-08.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Add https evidence Added evidence configuration for response time and URL. Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Fix formatting in JLS-08.md Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Re add AOU-30 Signed-off-by: Erik Hu <erik.hu@d-fine.com> --------- Signed-off-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: Luca <luca.fueger@d-fine.com> * Resolve TT-CONSTRUCTION Feedback (#23) * Moving changes from json to inc_nlohmann_json * Added checklist and evidence for TA-RELEASES * Worked through TA-Iterations checklist and evidence * added checklist and evidence for TA-TESTS * fix smaller details * Update TSF/trustable/assertions/TA-ITERATIONS_CONTEXT.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/assertions/TA-ITERATIONS_CONTEXT.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * Update TSF/trustable/assertions/TA-RELEASES_CONTEXT.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * resolved "binary" checklist points * Added JLS-52 * added references for newly created JLS-52 * Update TSF/trustable/statements/JLS-52.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * added verbose file reference to JLS-51 * Update TSF/trustable/statements/JLS-51.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * deleted AOU-08 checklist references * added JLS-51 link to TA-ITERATIONS, removed link to TA-RELEASES * deleted JLS-21 including its links * deleted JLS-21 * removed link TA-ITERATIONS -> JLS-51 * filled in JLS-53 * comments * added TA-Releases checklist answer * changed target to target_seconds * Update TSF/trustable/assertions/TA-RELEASES_CONTEXT.md Signed-off-by: Luca Füger <luca.fueger@d-fine.com> * fixes for JLS-16 * adapted JLS-53 formulation * fix for JLS-16 * Added item reference to JLS-53 * Update TA-RELEASES_CONTEXT.md Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * created further statements * Update TSF/trustable/statements/JLS-61.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> * Update TSF/trustable/statements/JLS-61.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> * Update TSF/trustable/statements/JLS-61.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> * Update TSF/trustable/statements/JLS-61.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> * added link from JLS-53 to JLS-14 and restructured JLS-52 * Provided evidence for JLS-63 * changed JLS-52, JLS-64 and JLS-65 formulation * smaller changes * Added references to JLS-65 * changed JLS-63 reference types * ... * completed JLS-64 * adding response time validator to JLS-64 * specifying remaining TODOs * Specify remaining work #2 * deleted JLS-66 * reworked JLS-62 and deleted 46 and 66 * adapted TA-TESTS_CONTEXT * fixed JLS-62 * Update TSF/trustable/assertions/TA-RELEASES_CONTEXT.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> * Update TSF/trustable/assertions/TA-RELEASES_CONTEXT.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> * Update TSF/trustable/statements/JLS-16.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> * added non_reproducible_tests and its reference to JLS-62 --------- Signed-off-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> Co-authored-by: LucaFgr <luca.fueger@d-fine.com> Co-authored-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: LucaFue <luca.fueger@d-fine.de> * Erikhu1 add missing links (nlohmann#25) * add missing links * fix faulty reference * Reference corrections (#19) * link TA-BEHAVIOURS to JLS-27 (#9) * update JLS-01 * update JLS-05 * update JLS-11 * update JLS-12 * update JLS-29 * update JLS-30 * update JLS-35 * remove duplicate link * Resolve TT-PROVENANCE Feedback (#14) * added checklist items to TA_INPUTS * move TSF instructions * add JLS-47 and link TA-INPUTS to JLS-34 * create JLS-48 * update TA-INPUTS context * update TA-INPUTS context * add JLS-49 * update inputs context * pin third party tools list to 3.12.0 * add JLS-50 and assessment of third party tools * update TA-INPUTS context * add reference to JLS-49 * link TA-RELEASES -> JLS-49 * Enhance third-party tools assessment documentation (#18) * Enhance third-party tools assessment documentation Expanded the assessment details for various third-party tools used in nlohmann/json Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Enhance documentation for third-party tools assessment 2 Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Enhance third-party tools assessment details 3 Added comprehensive descriptions for Hedley, lcov, libFuzzer, Material for MkDocs, MkDocs, OSS-Fuzz, Probot, and Valgrind. Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Revise risk categorization and tool assessment details Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * small fixes Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/docs/third_party_tools_assessment.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/docs/third_party_tools_assessment.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/docs/third_party_tools_assessment.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/docs/third_party_tools_assessment.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/docs/third_party_tools_assessment.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/docs/third_party_tools_assessment.md typos Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * typo Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * rename link Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * typo Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * typo - Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Enhance OSS-Fuzz section with issue links Updated the OSS-Fuzz role description to include links to specific GitHub issues. Signed-off-by: halnasri <hatem.alnasri@d-fine.com> --------- Signed-off-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: Erik Hu <erik.hu@d-fine.com> * add links from TA-SUPPLYCHAIN * add answer to supply chain context * remove dead link * create JLS-66 * link JLS-66 * finish answer SUPPLY_CHAIN context * misc fixes * misc fixes * misc fixes * Update TSF/trustable/assertions/TA-SUPPLY_CHAIN_CONTEXT.md Co-authored-by: LucaFue <luca.fueger@d-fine.de> Signed-off-by: Erik Hu <erik.hu@d-fine.com> * misc fixes * update JLS-49 * Update TSF/README.md Co-authored-by: halnasri <hatem.alnasri@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> --------- Signed-off-by: halnasri <hatem.alnasri@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> Co-authored-by: erikhu1 <erik.hu@d-fine.com> Co-authored-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: LucaFue <luca.fueger@d-fine.de> * halnasri-Revisit TT-RESULTS (#17) * revisit TT-RESULTS * rebase * resolve conflict * fixing some typos * AoU --> AOU * reformulated JLS-22 and completed the checklist of TA-DATA * Update TSF/trustable/statements/JLS-17.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Fix typo in 'misbehaviours' in documentation Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Fix typo in file path for nlohmann misbehaviours Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Clarify answers in TA-ANALYSIS_CONTEXT.md Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * adress comment of TA-DATA context file * fixed some issues in the TA-ANALYSIS context file * typo in JLS-17 * added a reference to TA-ANALYSIS_CONTEXT.md * added some answers to the checklist of TA-VALIDATION * fix typos Co-authored-by: LucaFue <luca.fueger@d-fine.de> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * added one answer to the TA-VALIDATION and fixed typos * answered checklist questions of TA-VALIDATION * reformulated JLS-17 and added the failure rate analysis * fix some checklist questions * typo * typos * typos and rewrite JLS 17 * Update TSF/trustable/assertions/TA-ANALYSIS_CONTEXT.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * Update TSF/trustable/assertions/TA-ANALYSIS_CONTEXT.md Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * link formating Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> * link formating Co-authored-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> --------- Signed-off-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: Erik Hu <erik.hu@d-fine.com> Co-authored-by: LucaFue <luca.fueger@d-fine.de> * added TA-Releases -> JLS-53 link (nlohmann#27) Co-authored-by: LucaFgr <luca.fueger@d-fine.com> * bump urllib3 version from 2.5.0 to 2.6.0 (nlohmann#26) * bump urllib3 version from 2.5.0 to 2.6.0 * nitpick EOF line * Erikhu1 sync with prod (nlohmann#31) (nlohmann#32) * Adding scores for TT-Changes * fix validators function signature * add new trudag dependencies * set review status of reviewed items again * fix outdated dependency --------- Co-authored-by: aschemmel-git <alexander.schemmel@bmw.de> * Halnasri fix statements (nlohmann#34) * Erikhu1 sync with prod (nlohmann#31) * Adding scores for TT-Changes * fix validators function signature * add new trudag dependencies * set review status of reviewed items again * fix outdated dependency --------- Co-authored-by: aschemmel-git <alexander.schemmel@bmw.de> * fix JLS-08 * fix JLS-08 and JLS-10 * fix JLS-20 * fix JLS-11 and JLS-28 * fix JLS-16 * 2.0 --> 2 * Update JLS-11 * fix JLS-27 * fix JLS-65 * fix JLS-63 * added JLS-19 to build instructions * lcov and coverity * added clang-tidy * removed one validator from JLS-16 * fix lcov and coverity part * edited reference type for scorecard and inrospector * fix JLS-02 --------- Co-authored-by: aschemmel-git <alexander.schemmel@bmw.de> Co-authored-by: halnasri <hatem.alnasri@d-fine.com> --------- Signed-off-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> Co-authored-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: Luca <luca.fueger@d-fine.com> Co-authored-by: LucaFue <luca.fueger@d-fine.de> Co-authored-by: aschemmel-git <alexander.schemmel@bmw.de> * Bump urllib3 from 2.6.0 to 2.6.3 in /.devcontainer/S-CORE Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.6.0 to 2.6.3. - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.0...2.6.3) --- updated-dependencies: - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Remove GitHub actions reference from JLS-16.md Removed reference to GitHub actions page from JLS-16.md Signed-off-by: Erik Hu <erik.hu@d-fine.com> --------- Signed-off-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: aschemmel-git <alexander.schemmel@bmw.de> Co-authored-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: Luca <luca.fueger@d-fine.com> Co-authored-by: LucaFue <luca.fueger@d-fine.de> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Erikhu1 fix code scanning alerts (nlohmann#40) * restructure requirements file * update trustable pins * install reqs before trustable * Erikhu1 matrix specification (nlohmann#43) * configure qnx * add GCC toolchain * fix EOF * update gitignore * update gitignore * add reference to check amalgamation in JLS-14 (nlohmann#44) * Resolve TA-Analysis comments (nlohmann#39) * review TA-ANALYSIS * addressing other comments of AS * add reference to JLS-74 * typo * add reference to evidence list * changed the data storage of the test results * deleted JLS-75 and edited JLS-31 * delete JLS-75 file * created link from TA-ANALYSIS to JLS-27 * remove the db from stash * edited scoring data storage * move data storage to data_storage folder * fix documentation due to changes in the data storage * changes in the Context files due to the new data storage * changed AOU 09 and 18 * changes to to changing the AOUs 09 18 and 19 * remove reference to JLS-75 and replace it with reference to JLS-31 * typo * improved structure of ci_failure_rate_analysis.md * Revert "improved structure of ci_failure_rate_analysis.md" This reverts commit a566806. * improved structure of ci_failure_rate_analysis.md * use correct path to data storage * # Ensure sqlite3 is available * add check to env vaiables * typo * added better error when acessing the TSF_PERSIST_DB env variable * add debug to CI * fix CI step Generate trudag report * fix test_publication workflow * fix posible stash problem for data saving * remove TSF/MemoryEfficientTest ResultData.db from stash (nlohmann#46) * fix branch checkout structure in publish_test_data_* workflows (nlohmann#49) * Halnasri fix ci build documentation (nlohmann#50) * fix bazel version conflict in docs-build workflow * set verion of bazel in docs-build to 8.3.0 * Reformulating AOU-19 --------- Signed-off-by: Luca Füger <luca.fueger@d-fine.com> Signed-off-by: Erik Hu <erik.hu@d-fine.com> Signed-off-by: halnasri <hatem.alnasri@d-fine.com> Signed-off-by: LucaFue <luca.fueger@d-fine.de> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Erik Hu <erik.hu@d-fine.com> Co-authored-by: halnasri <hatem.alnasri@d-fine.com> Co-authored-by: Luca <luca.fueger@d-fine.com> Co-authored-by: LucaFue <luca.fueger@d-fine.de> Co-authored-by: aschemmel-git <alexander.schemmel@bmw.de> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 75cc193 commit dcdf05a

23 files changed

+583
-122
lines changed

.bazelrc

Lines changed: 26 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,4 +6,29 @@ build --tool_java_runtime_version=remotejdk_17
66
test --test_output=errors
77

88
common --registry=https://raw.githubusercontent.com/eclipse-score/bazel_registry/main/
9-
common --registry=https://bcr.bazel.build
9+
common --registry=https://bcr.bazel.build
10+
11+
# GCC Linux build configurations
12+
common:gcc_x86_64_linux --host_platform=@score_bazel_platforms//:x86_64-linux
13+
common:gcc_x86_64_linux --platforms=@score_bazel_platforms//:x86_64-linux
14+
common:gcc_x86_64_linux --extra_toolchains=@gcc_toolchain//:host_gcc_12
15+
16+
# In order to build for QNX, you need:
17+
# * An account on qnx.com
18+
# * An assigned QNX 8 license to your account
19+
# * If you are applicable for "Free for non commercial use" see here: https://www.qnx.com/products/everywhere/
20+
# * The credentials for this account stored in your ~/.netrc (machine qnx.com)
21+
# * A license stored under `/opt/score_qnx/license/licenses`
22+
common:qnx_x86_64 --host_platform=@score_bazel_platforms//:x86_64-linux
23+
common:qnx_x86_64 --platforms=@score_bazel_platforms//:x86_64-qnx8_0
24+
common:qnx_x86_64 --extra_toolchains=@toolchains_qnx_ifs//:ifs_x86_64
25+
common:qnx_x86_64 --extra_toolchains=@toolchains_qnx_qcc//:qcc_x86_64
26+
common:qnx_x86_64 --credential_helper=*.qnx.com=%workspace%/tools/qnx_credential_helper.py
27+
common:qnx_x86_64 --sandbox_writable_path=/var/tmp
28+
29+
common:qnx_arm64 --host_platform=@score_bazel_platforms//:x86_64-linux
30+
common:qnx_arm64 --platforms=@score_bazel_platforms//:arm64-qnx8_0
31+
common:qnx_arm64 --extra_toolchains=@toolchains_qnx_ifs//:ifs_aarch64
32+
common:qnx_arm64 --extra_toolchains=@toolchains_qnx_qcc//:qcc_aarch64
33+
common:qnx_arm64 --credential_helper=*.qnx.com=%workspace%/tools/qnx_credential_helper.py
34+
common:qnx_arm64 --sandbox_writable_path=/var/tmp

.dotstop.dot

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,6 @@ digraph G {
1919
"AOU-15" [sha=f4d2fdcacc3c3bd743af3ff5c2a08ceb650e59015ed846c35ddb4de104e80cec];
2020
"AOU-16" [sha="4e08bac839cba01a4dc2a794bd2d1254d388945c6b79293684e00b9f8d03f31e"];
2121
"AOU-17" [sha=ce26eef503179bbedca706f43fedc289d8c56580c4b885b3abab440d2de25870];
22-
"AOU-18" [sha="672193d261861effb34f845d6e3421f47ce85e79d7ef34f62ce5c10bef68e796"];
2322
"AOU-19" [sha="877c346448621a81b2d1418e610575bfcd556d2f56a14f23f289b90828907928"];
2423
"AOU-20" [sha="d17ea5c6a3f07b516abc7c51d4b15b1a130a28602fbd4eb6872006a2e5f939d0"];
2524
"AOU-21" [sha="d1712fcf7a0a00659021a69784f697b5d7b404aeadb7be66553218ba2e6c0bf7"];
@@ -91,6 +90,7 @@ digraph G {
9190
"JLS-64" [sha="40f1382c156e308ee543c30df4dc7eb457ac14d472909c30eb6caae9a3bc1d68"];
9291
"JLS-65" [sha="e413de6c831c1c019c67c3e3477b9dc9302cc79433ec894beaee0c95e053b545"];
9392
"JLS-66" [sha="cf57eaf55654ef52589b1879c7294de13ddf1258ecdff4f6371178c6e8e6975b"];
93+
"JLS-74" [sha="c161214f0f206f3c0826750978fcc4c99e2765a0c3333592e1293b323434ca34"];
9494
"NJF-01" [sha="548dc86014e093974f68660942daa231271496a471885bbed092a375b3079bd8"];
9595
"NJF-02" [sha="6ea015646d696e3f014390ff41612eab66ac940f20cf27ce933cbadf8482d526"];
9696
"NJF-03" [sha="4bd1f8210b7bba9a248055a437f377d9da0b7576c5e3ed053606cf8b5b2febe3"];
@@ -400,6 +400,9 @@ digraph G {
400400
"PJD-03" -> "PJD-02" [sha="34c3d9163590aec428486eef28fa3895a3c425b2ceb826d3c1d592d34eefe14e"];
401401
"TA-ANALYSIS" -> "JLS-17" [sha=eac76c7d417f623d9dd1a220fc0b3ec6e2c2b9e16781eefae6d21dbd35d1402d];
402402
"TA-ANALYSIS" -> "JLS-26" [sha="250c8c20314a242c1daac1278ef5a96d97bce8d943318430a91ee30580b5b29d"];
403+
"TA-ANALYSIS" -> "JLS-74" [sha="438058a274824cc8774588099abf500dcac8fa0215c486f79a43e00c6baa66a4"];
404+
"TA-ANALYSIS" -> "JLS-31" [sha="80b0be4318282eee6799e35ef618a077539ec0d4c783db2e50e68d00e9085018"];
405+
"TA-ANALYSIS" -> "JLS-27" [sha="cb77a6a19e50c33a85cc9b099e4401321f7460a9a6afef31bd2b9da29fe063af"];
403406
"TA-BEHAVIOURS" -> "JLEX-01" [sha="8cd931ef61b7012140344adf54469e943bfc690ee54f12db12777464880061db"];
404407
"TA-BEHAVIOURS" -> "JLEX-02" [sha=cb26451e31a56b1eb51a4d45283ba4a7c6e898efbd045b59cba10d3c6aa093de];
405408
"TA-BEHAVIOURS" -> "JLS-03" [sha=cf9211c07452914cb2d0b455f859b26cb2724423eae5187e8cbfdff06d1b5ba3];
@@ -423,7 +426,6 @@ digraph G {
423426
"TA-CONSTRAINTS" -> "AOU-09" [sha="b47001a26392bd151e4a03feccb198c74fdfbdfaeb055fd682b59e6b92f0bed5"];
424427
"TA-CONSTRAINTS" -> "AOU-15" [sha="936c697c984cfadd07db6e2eef5a3f5f540c57d099c7a773c00e551ea15bdf7a"];
425428
"TA-CONSTRAINTS" -> "AOU-17" [sha="b9866189c44d25116cc7cd47432546f8ea2b3aee0b493b364a89872e11957a69"];
426-
"TA-CONSTRAINTS" -> "AOU-18" [sha="ca8930b0d06ea3987a85112508f49cfaf1cf77d9a405535f3173975175f15d78"];
427429
"TA-CONSTRAINTS" -> "AOU-19" [sha="ef2ca2a552493258538bf72c975d4c0ec711cea193adb804765feea86382ec0a"];
428430
"TA-CONSTRAINTS" -> "AOU-22" [sha="54608fda93406fa3546c2d38ef09d34f7252e2c40bb6bc982decf762ab1c68f0"];
429431
"TA-CONSTRAINTS" -> "AOU-23" [sha="6a9aa9e8b107c684e68b21b44c363185c5f0668c39307a00758781d65f3e61d4"];

.dotstop_extensions/README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -410,10 +410,10 @@ Note: Starting with trudag v2025.09.16, "Commit date/time" is a unix timestamp (
410410

411411
## push
412412

413-
This functionality writes the generated data into an sqlite database `TrustableScoring.db` located in the folder `TSF`. This database contains two tables, `commit_info`, where the metadata of "info" are stored, and `scores`, where the scores are stored, and which references `commit_info` via the date as foreign key.
413+
This functionality writes the generated data into an sqlite database stored under TSF/data_storage/ (e.g. TrustableScoring_YYYY-MM-DD.db). The file path can be configured via the environment variable TSF_SCORING_DB. This database contains two tables, `commit_info`, where the metadata of "info" are stored, and `scores`, where the scores are stored, and which references `commit_info` via the date as foreign key.
414414

415415
It is intended to store data only once per commit. If, for any reason, the same commit generates data more than once, then only the most recent data are stored, and the obsolete data are deleted. This still ensures that the scoring history of the main branch is as complete as possible.
416416

417417
## pull
418418

419-
This functionality parses the information stored in `TrustableScoring.db` into the format which is expected by trudag. In case that no data is found, the empty history is returned.
419+
This functionality parses the information stored in the scoring database configured via TSF_SCORING_DB (stored under TSF/data_storage/) into the format which is expected by trudag. In case that no data is found, the empty history is returned.

.dotstop_extensions/data_store.py

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,12 @@
33
import os
44

55
# global variable -- path to persistent data storage
6-
persistent_storage = "TSF/TrustableScoring.db"
6+
persistent_storage = os.environ.get("TSF_SCORING_DB")
7+
if not persistent_storage:
8+
raise RuntimeError(
9+
"TSF_SCORING_DB is not set.\n"
10+
"This script requires the path to the persistent SQLite database.\n"
11+
)
712

813
def data_store_pull() -> list[dict]:
914
data = get_my_data()

.github/workflows/docs.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -85,6 +85,8 @@ jobs:
8585
path: TSF/docs/generated/
8686

8787
- name: Build documentation
88+
env:
89+
USE_BAZEL_VERSION: 8.3.0
8890
run: |
8991
bazel run ${{ inputs.bazel-target }}
9092
tar -cf github-pages.tar _build

.github/workflows/publish_documentation.yml

Lines changed: 79 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -120,36 +120,102 @@ jobs:
120120
git commit -m "Updated issues list" || echo "No changes to commit"
121121
git push origin save_historical_data && git pull
122122
123-
- name: Load persistent data
123+
- name: Select persistent scoring DB (rotate if near GitHub limit)
124+
id: select_db
125+
shell: bash
124126
run: |
125-
if ! git ls-tree --name-only origin/save_historical_data TSF/TrustableScoring.db | grep TSF/TrustableScoring.db; then
126-
mkdir -p TSF
127-
touch TSF/TrustableScoring.db
128-
git add TSF/TrustableScoring.db
129-
git commit -m "Initialise persistent data storage"
130-
git push origin save_historical_data
127+
set -euo pipefail
128+
129+
# Ensure sqlite3 is available
130+
if ! command -v sqlite3 >/dev/null 2>&1; then
131+
echo "[info] sqlite3 not found -> installing"
132+
sudo apt-get update
133+
sudo apt-get install -y sqlite3
134+
fi
135+
136+
DB_DIR="TSF/data_storage"
137+
DB_PREFIX="TrustableScoring"
138+
LIMIT_BYTES=$((90 * 1024 * 1024)) # 90 MiB
139+
today=$(date -u +%F)
140+
141+
echo "[info] Rotation threshold: ${LIMIT_BYTES} bytes"
142+
echo "[info] Today (UTC): ${today}"
143+
144+
# newest dated DB in storage branch
145+
latest="$(git ls-tree -r --name-only origin/save_historical_data "$DB_DIR" \
146+
| grep -E "^${DB_DIR}/${DB_PREFIX}_[0-9]{4}-[0-9]{2}-[0-9]{2}(_[0-9]{3})?\.db$" \
147+
| sort | tail -n 1 || true)"
148+
149+
mkdir -p "$DB_DIR"
150+
151+
if [ -z "${latest}" ]; then
152+
latest="${DB_DIR}/${DB_PREFIX}_${today}.db"
153+
sqlite3 "$latest" "PRAGMA user_version = 1;"
154+
echo "[info] No existing scoring DB -> created: $latest"
155+
echo "TSF_SCORING_DB=${latest}" >> "$GITHUB_ENV"
156+
echo "db_path=$latest" >> "$GITHUB_OUTPUT"
157+
exit 0
158+
fi
159+
160+
git checkout save_historical_data -- "$latest"
161+
size=$(stat -c%s "$latest")
162+
echo "[info] Current scoring DB: $latest (${size} bytes)"
163+
164+
if [ "$size" -ge "$LIMIT_BYTES" ]; then
165+
base="${DB_DIR}/${DB_PREFIX}_${today}.db"
166+
new="$base"
167+
if [ -e "$new" ]; then
168+
i=1
169+
while [ -e "${DB_DIR}/${DB_PREFIX}_${today}_$(printf '%03d' "$i").db" ]; do
170+
i=$((i+1))
171+
done
172+
new="${DB_DIR}/${DB_PREFIX}_${today}_$(printf '%03d' "$i").db"
173+
fi
174+
sqlite3 "$new" "PRAGMA user_version = 1;"
175+
latest="$new"
176+
echo "[info] Rotation triggered -> new DB: $latest"
177+
else
178+
echo "[info] Rotation not needed."
131179
fi
132-
git checkout $branch_name
133-
git checkout save_historical_data -- TSF/TrustableScoring.db
180+
181+
echo "TSF_SCORING_DB=${latest}" >> "$GITHUB_ENV"
182+
echo "[info] Using scoring DB: $latest"
183+
echo "db_path=$latest" >> "$GITHUB_OUTPUT"
184+
134185
135186
- name: Generate trudag report
187+
env:
188+
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
189+
TSF_SCORING_DB: ${{ steps.select_db.outputs.db_path }}
136190
run: |
191+
set -euo pipefail
192+
echo "[verify] TSF_SCORING_DB='$TSF_SCORING_DB'"
193+
test -n "$TSF_SCORING_DB"
194+
test -f "$TSF_SCORING_DB"
195+
sqlite3 "$TSF_SCORING_DB" "PRAGMA user_version;" >/dev/null
137196
REPO_FULL="${{ github.repository }}"
138197
REPO_NAME="${REPO_FULL#*/}"
139198
OWNER_NAME="${REPO_FULL%%/*}"
140199
TSF/scripts/generate_report.sh "https://${OWNER_NAME}.github.io/${REPO_NAME}/main"
141-
env:
142-
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
143200
144201
- name: Checkout data storage branch
145202
run: |
146-
git stash push --include-untracked -- $(git status --porcelain | awk '{print $2}' | grep -v TSF/TrustableScoring.db)
203+
git stash push --include-untracked -- . ':(exclude)TSF/data_storage' ':(exclude)TSF/data_storage/**' ':(exclude)TSF/TrustableScoring.db'
147204
git checkout save_historical_data
148205
git pull
149206
150207
- name: Store persistent data
151208
run: |
152-
git add TSF/TrustableScoring.db
209+
set -euo pipefail
210+
211+
if [ -z "${TSF_SCORING_DB:-}" ]; then
212+
echo "::error::TSF_SCORING_DB is not set. Did 'Select persistent scoring DB' run successfully?"
213+
exit 1
214+
fi
215+
216+
echo "[info] Committing scoring DB: $TSF_SCORING_DB"
217+
218+
git add "$TSF_SCORING_DB"
153219
git commit -m "Append data storage" || echo "Historical data already up to date."
154220
git push origin save_historical_data
155221

.github/workflows/test_publication.yml

Lines changed: 24 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -56,14 +56,36 @@ jobs:
5656
pip install --require-hashes -r .devcontainer/S-CORE/requirements.txt
5757
pip install git+https://gitlab.com/CodethinkLabs/trustable/trustable@83b4023d7e2bd2b984db2c81543266ce09a7cbf7
5858
59+
- name: Prepare scoring DB (test)
60+
shell: bash
61+
run: |
62+
set -euo pipefail
63+
64+
if ! command -v sqlite3 >/dev/null 2>&1; then
65+
echo "[info] sqlite3 not found -> installing"
66+
sudo apt-get update
67+
sudo apt-get install -y sqlite3
68+
fi
69+
70+
mkdir -p TSF/data_storage
71+
DB="TSF/data_storage/TrustableScoring_test.db"
72+
sqlite3 "$DB" "PRAGMA user_version = 1;"
73+
echo "TSF_SCORING_DB=$DB" >> "$GITHUB_ENV"
74+
5975
- name: Generate trudag report
76+
env:
77+
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
78+
TSF_SCORING_DB: ${{ env.TSF_SCORING_DB }}
6079
run: |
80+
set -euo pipefail
81+
82+
echo "[verify] TSF_SCORING_DB='$TSF_SCORING_DB'"
83+
test -n "$TSF_SCORING_DB"
84+
test -f "$TSF_SCORING_DB"
6185
REPO_FULL="${{ github.repository }}"
6286
REPO_NAME="${REPO_FULL#*/}"
6387
OWNER_NAME="${REPO_FULL%%/*}"
6488
TSF/scripts/generate_report.sh "https://${OWNER_NAME}.github.io/${REPO_NAME}/main"
65-
env:
66-
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
6789
6890
- name: Install tools
6991
run: |

0 commit comments

Comments
 (0)