ossf/scorecard

check information in README.md and other docs should be programmatically generated from checks.md 6 days ago

kind/docs help wanted

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Support Makefiles in `dependency-pinning` check 9 days ago

kind/enhancement help wanted good first issue check/Pinned-Dependencies

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Feature: Improve error message when branch protection check fails because of the use of GITHUB_TOKEN 12 days ago

kind/docs kind/enhancement good first issue check/Branch-Protection Stale

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Factor whether or not private vulnerability reporting is enabled into the scorecard 20 days ago

kind/enhancement help wanted good first issue check/Security-Policy

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Dangerous Workflow: some user input are not being detected as untrusted input. about 1 month ago

kind/enhancement good first issue check/Dangerous-workflow

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Feature: specify the cause of failure if it is unpinned pip install 4 months ago

kind/enhancement good first issue check/Pinned-Dependencies

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

BUG: Gitlab Commits Before Date Needs More Logic 4 months ago

kind/bug good first issue gitlab

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Specify a user agent for OSV.dev 8 months ago

kind/enhancement good first issue check/Vulnerabilities

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Feature: Check custom CII Best Practices URL 8 months ago

kind/enhancement good first issue check/CII-Best-Practices

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Checking for pyup should be removed 11 months ago

kind/docs help wanted good first issue Check/Dependency-Update-Tool

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

BUG: Dangerous-Workflow doesn't trigger on `toJSON(github.event)` 11 months ago

kind/bug good first issue check/Dangerous-workflow

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Open Issues Need Help