Debug option

[laurentsimon]

Add debug/verbose option to help troubleshoot problems

[evverx]

I wonder if there are any updates on this? With issues like ossf/scorecard#2812 popping up every other release it would be great to be able to figure out where zeroes come from by going to dashboards like https://api.securityscorecards.dev/projects/github.com/systemd/systemd. To make it even more useful ossf/scorecard-webapp#206 should probably be addressed too.

[evverx]

It's related to systemd/systemd#27530

[spencerschrock]

I wonder if there are any updates on this?

Seeing as scorecard supports debug statements, and we've had some improvements to our logs to provide more details recently (#2835), I'd support having a way of running the action in verbose mode.

I wouldn't necessarily want those results feeding into the API, but would it be enough to be accessible from the action output?

With issues like ossf/scorecard#2812 popping up every other release

I'm working on some golden tests to try and avoid these scoring regressions.

[evverx]

would it be enough to be accessible from the action output?

I'm not sure it's convenient in the sense that instead of just clicking on the badge it would be necessary to go to the actions tab, select the "scorecard" action and go through the logs. Other than that it would make it impossible to view the results without logging in to GitHub.

I'm working on some golden tests to try and avoid these scoring regressions.

Good to know. Thanks! I think the technique used in ossf/scorecard#2812 would help there too.