ossf/scorecard

Factor whether or not private vulnerability reporting is enabled into the scorecard 4 days ago

kind/enhancement help wanted good first issue check/Security-Policy

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Dangerous Workflow: some user input are not being detected as untrusted input. 21 days ago

kind/enhancement good first issue check/Dangerous-workflow

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Feature: specify the cause of failure if it is unpinned pip install 3 months ago

kind/enhancement good first issue check/Pinned-Dependencies

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Feature: Improve error message when branch protection check fails because of the use of GITHUB_TOKEN 3 months ago

kind/docs kind/enhancement good first issue check/Branch-Protection Stale

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Support Makefiles in `dependency-pinning` check 4 months ago

kind/enhancement help wanted good first issue check/Pinned-Dependencies

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

BUG: Gitlab Commits Before Date Needs More Logic 4 months ago

kind/bug good first issue gitlab

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Specify a user agent for OSV.dev 7 months ago

kind/enhancement good first issue check/Vulnerabilities

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Feature: Check custom CII Best Practices URL 8 months ago

kind/enhancement good first issue check/CII-Best-Practices

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Checking for pyup should be removed 10 months ago

kind/docs help wanted good first issue Check/Dependency-Update-Tool

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

BUG: Dangerous-Workflow doesn't trigger on `toJSON(github.event)` 11 months ago

kind/bug good first issue check/Dangerous-workflow

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Open Issues Need Help