Skip to content

[codex] Reject invalid scorecard policy thresholds - #10

Merged
stacknil merged 1 commit into
mainfrom
codex/fix-scorecard-threshold-validation
Apr 19, 2026
Merged

stacknil merged 1 commit into
mainfrom
codex/fix-scorecard-threshold-validation

Conversation

@stacknil

Copy link
Copy Markdown
Owner

Summary

  • reject YAML boolean values for minimum_scorecard_score
  • reject non-finite thresholds such as .nan and .inf
  • add regression coverage for invalid scorecard policy thresholds

Testing

  • python -m pytest tools/sbom-diff-and-risk/tests/test_policy.py tools/sbom-diff-and-risk/tests/test_policy_scorecard.py

Follow-up to the Codex review on #9 about minimum_scorecard_score accepting YAML booleans and non-finite numbers.

@stacknil
stacknil merged commit 11e5805 into main Apr 19, 2026
6 checks passed
@stacknil
stacknil deleted the codex/fix-scorecard-threshold-validation branch April 19, 2026 15:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant