docs: README supply-chain badge → 'secure' [failproofai-394]#393
Conversation
Replace the live OSV-Scanner workflow-status badge (which renders 'passing') with a static 'supply chain: secure' badge, kept linked to the workflow runs so the claim stays verifiable. The OSV gate as a required check is the actual enforcement. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
|
Warning Review limit reached
More reviews will be available in 4 minutes and 55 seconds. Learn how PR review limits work. Your organization has run out of usage credits. Purchase more in the billing tab. ⌛ How to resolve this issue?After more reviews become available, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available. Please see our Fair Usage Limits Policy for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (2)
Comment |
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
What
Change the README supply chain badge from the live OSV-Scanner workflow-status badge (which renders
passing) to a staticsupply chain: securebadge — still linked to the workflow runs.Why
"secure" reads as a posture statement, which is the intent here. shields.io's GitHub Actions status endpoint can only render the run state (
passing/failing), so the custom word requires a static badge.Trade-off
A static badge won't auto-flip to red if a future scan breaks. The real enforcement remains the OSV-Scanner gate as a required status check on
main(block-on-any-finding), and the badge still links to the live workflow runs so current status is verifiable.🤖 Generated with Claude Code