Unify Scorecard metric and provider IDs - Snake Case to Lower Camel Case

[dzemanov]

Currently, the naming convention for Scorecard metric IDs and provider IDs utilizes snake_case (e.g. github.open_prs). This deviates from the established naming convention used in app-config.yaml and with the planned design of the Scorecard, which uses lowerCamelCase.

This is a breaking change for existing plugins but is best addressed now, during Developer Preview and before onboarding more metrics, to prevent future inconsistencies.

To fix this problem apply the following changes to standardize all metric and provider IDs to lowerCamelCase:

• update all instances of metric IDs and provider IDs within the Scorecard codebase from snake_case to lowerCamelCase
• don't forget to update the occurrences in any configuration files, tests, documentation, translation keys or any URLs using old IDs

[fullsend-ai-triage]

🤖 Finished Triage · ✅ Success · Started 3:20 PM UTC · Completed 3:24 PM UTC
Commit: 2903d71 · View workflow run →

[fullsend-ai-triage]

Triage Summary

This is a well-defined refactoring task to standardize all Scorecard metric and provider IDs from snake_case to lowerCamelCase, aligning them with the existing app-config.yaml KPI naming convention.

Scope Analysis

The change affects approximately 770 occurrences across ~81 files in the scorecard workspace. Key areas:

• 6 provider modules with ID definitions (GitHub, Jira, SonarQube, Dependabot, OpenSSF, Filecheck)
• Translation files (ref.ts + 5 locale files: de, es, fr, it, ja)
• Config files (app-config.yaml metricId values and plugin metric sub-keys)
• Tests and fixtures (~150+ occurrences in router.test.ts and e2e tests alone)
• MetricProvidersRegistry validation regex

Example Renames

Before (snake_case)	After (lowerCamelCase)
github.open_prs	github.openPrs
jira.open_issues	jira.openIssues
sonarqube.quality_gate	sonarqube.qualityGate
dependabot.alerts_critical	dependabot.alertsCritical
openssf.code_review	openssf.codeReview

Special Attention: OpenSSF Dynamic ID Generation

The OpenSSF provider dynamically generates IDs via openssf.${name.toLowerCase().replace(/-/g, '_')}. This logic needs to be updated to produce lowerCamelCase output instead.

Proposed Test Verification

1. Each provider's getProviderId() returns lowerCamelCase IDs
2. MetricProvidersRegistry validation accepts lowerCamelCase format
3. Translation keys resolve correctly with new IDs
4. All existing e2e and unit tests pass with updated references
5. Config parsing maps lowerCamelCase metricId values to providers

This is correctly identified as a breaking change best addressed during Developer Preview. A changeset should accompany the PR to document the breaking change.

---

Labels: Scorecard workspace refactoring issue for naming convention standardization.

[dzemanov]

/fs-code

[fullsend-ai-coder]

🤖 Finished Code · ✅ Success · Started 4:25 PM UTC · Completed 5:06 PM UTC
Commit: 8e6b595 · View workflow run →