aaronsb_obsidian-mcp-plugin/.github
Aaron Bockelie f1cc9d63ba feat(scorecard): scheduled regression gate vs committed baseline (#165)
Standalone weekly watch (+ workflow_dispatch) that FAILS only on a real
portal regression vs scripts/scorecard-baseline.json:
- Health/Review score-ratio downgrade
- automated issue count increase
- a new behaviour/permission ("**Title**:") finding

Never inspects advisory wording — structured deltas only. Scraper drift
→ exit 3, reported distinctly (fix scorecard.mjs, not a regression).
Portal unreachable → exit 0 (inconclusive, never a false fail). Gates
nothing in the release path; no PR/release triggers; no dependency
install (Node builtins only).

`make scorecard-gate` runs it; `make scorecard-baseline` re-snapshots
deliberately (refuses on drift) — a named act, since an accidental
re-baseline silently disarms the gate. Baseline captured for 0.11.25
(Health Excellent 4/4, Review Satisfactory 3/4, 5 issues, 12 findings)
— still shows Dynamic Code Execution; it clears (an improvement, not a
fail) when a post-ADR-201 release is scanned.

Validated: happy path exit 0, simulated regression exit 1 (all 3
classes), drift refusal, idempotent re-baseline.

Closes #165
2026-05-16 23:42:05 -05:00
..
ISSUE_TEMPLATE docs: Add comprehensive project documentation and security audit 2025-07-12 00:14:45 -05:00
workflows feat(scorecard): scheduled regression gate vs committed baseline (#165) 2026-05-16 23:42:05 -05:00
dependabot.yml ci: Enable Dependabot for automated dependency updates 2025-12-03 12:43:00 -06:00
FUNDING.yml feat: Add GitHub Sponsors integration 2025-08-13 07:12:15 -05:00
pull_request_template.md docs: Add comprehensive project documentation and security audit 2025-07-12 00:14:45 -05:00