Don't create issues for dangerous workflows when we have an inconclus…

…ive result Signed-off-by: Colm O hEigeartaigh <[email protected]>
ossf · Jan 8, 2024 · 3521ed8 · 3521ed8
1 parent 2767817
commit 3521ed8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/policies/workflow/workflow.go b/pkg/policies/workflow/workflow.go
@@ -136,7 +136,7 @@ func (b Workflow) Check(ctx context.Context, c *github.Client, owner,
 	}
 
 	logs := convertLogs(l.Flush())
-	pass := res.Score >= checker.MaxResultScore
+	pass := res.Score >= checker.MaxResultScore || res.Score == checker.InconclusiveResultScore
 	var notify string
 	if !pass {
 		notify = fmt.Sprintf(`Project is out of compliance with Dangerous Workflow policy: %v