Repository navigation
Link Endor Labs documentation from the README - #108
Merged
Merged
Conversation
The action README carried no links to docs.endorlabs.com. This repository is our highest-authority indexed asset on scanning topics and it collects inbound links from every customer repository that uses the action, so the missing links are authority we already have but do not pass on to the documentation. Adds contextual links only. No claims about product behavior change: - Each capability bullet links to the page for that scan type. - The intro paragraph links PR scans, PR comments, and SARIF export. - A new Documentation section links the GitHub Actions setup page, the keyless authentication page, and the endorctl CLI reference. - The prerequisites link keyless authentication, API keys, and authorization policies. - Each parameter table points at the reference docs behind its inputs. All 22 URLs were checked and return 200 on docs.endorlabs.com. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
docs.endorlabs.com canonicalizes without a trailing slash. Every page declares a self-referencing canonical tag with no trailing slash, and requesting the slashed form returns 308 to the unslashed one. The links added in the previous commit all carried a trailing slash, so each one was a redirect hop rather than a direct hit on the canonical URL. For a change whose point is to send readers and crawlers to the canonical URL, that was the wrong form. All 22 URLs now return 200 directly, verified without following redirects. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
The basic-validation audit step started failing on new advisories against locked transitive deps. yarn 1 ignores --audit-level and exits non-zero on any finding, so all of them need clearing: - undici >=8.12.2 (high: cache poisoning, TLS bypass, DoS) - fast-xml-parser >=5.12.0 (low) - minimatch >=11.0.1 (moderate, via readdir-glob and glob) - glob >=14.0.2 for archiver-utils only (moderate). Scoped with **/archiver-utils/glob so the jest/rimraf glob@7/10 stay put; even the latest archiver-utils still pins glob@^10. dist/ is rebuilt and .licenses/ is re-cached. glob 14 is BlueOak-1.0.0 per package.json, but licensee reads its LICENSE.md as "other", so it is listed under reviewed in .licensed.yml. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Second part of the dependency bump commit. One createCommitOnBranch call cannot carry every rebuilt bundle, so they are split across commits. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Second part of the dependency bump commit. One createCommitOnBranch call cannot carry every rebuilt bundle, so they are split across commits. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Second part of the dependency bump commit. One createCommitOnBranch call cannot carry every rebuilt bundle, so they are split across commits. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
nrynss
approved these changes
Nov 11, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
A citation baseline run found that this README has no links to
docs.endorlabs.comat all. Readers who land here, and the AI assistants that cite this page, have no path from the README to the documentation for anything it describes.One correction to how this was originally framed. The baseline report justified this change as redirecting SEO authority to the docs. That mechanism does not work: GitHub renders every external link in a README with
rel="nofollow", so these links pass no PageRank. The real benefit is narrower and worth stating honestly:This does not fix the broken citations themselves. That needs the TLS certificate on
docs.api.endorlabs.comand the removal of thedocs-archiveDNS records, neither of which lives in a repository.What changed
Contextual links only. No wording about product behavior was changed, and no parameter descriptions were touched.
Verification
All 22 documentation URLs return
200directly, checked without following redirects. Each link target was checked against the page it points to, so the link text matches the page subject.The second commit fixes a defect in the first.
docs.endorlabs.comcanonicalizes without a trailing slash, declares self-referencing canonical tags in that form, and returns308for the slashed form. The links initially carried trailing slashes, making each one a redirect hop to the canonical URL rather than a direct hit on it.🤖 Generated with Claude Code