Repository navigation
Standardise the Scope Guard showcase and add coverage gates - #34
Merged
efegokdemir merged 1 commit intoOct 22, 2026
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Standardises the Scope Guard README and community guidance, adds measured coverage gates, and reduces duplicate branch-push runs. AI assistance: Codex prepared the changes and ran the local checks listed below.
Motivation
Scope Guard had no coverage thresholds, and workflow pushes on non-main branches duplicated checks already run for pull requests.
Changes
Adds 90% line/statement, 90% function and 80% branch coverage gates. Restricts CI/CodeQL push triggers to main and narrows Scorecard top-level permissions while retaining job-level reporting permissions. Standardises the README and community files.
Tests performed
Node 22 and 24 local validation passed: clean install, tests, coverage, lint, typecheck, build and package/Action smoke checks. Issue Form YAML and Markdown links were checked;
npm auditreported no vulnerabilities.Compatibility
No runtime code or package version changes. The package continues to require Node.js >=22; Node 20 CI entries are compatibility checks only.
Security and privacy
No scan was removed. Scorecard SARIF and OIDC job permissions remain explicit; top-level default permissions are removed.
Shopify source/evidence
No new Shopify behaviour is introduced.
Release impact
Repository documentation, tests and workflow configuration only. No package release is needed.
Checklist