ossf/scorecard

Dangerous Workflow: some user input are not being detected as untrusted input. 8 days ago

kind/enhancement good first issue check/Dangerous-workflow

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

check information in README.md and other docs should be programmatically generated from checks.md about 1 month ago

kind/docs help wanted

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Support Makefiles in `dependency-pinning` check about 1 month ago

kind/enhancement help wanted good first issue check/Pinned-Dependencies

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Feature: Improve error message when branch protection check fails because of the use of GITHUB_TOKEN about 1 month ago

kind/docs kind/enhancement good first issue check/Branch-Protection Stale

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Factor whether or not private vulnerability reporting is enabled into the scorecard about 2 months ago

kind/enhancement help wanted good first issue check/Security-Policy

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Feature: specify the cause of failure if it is unpinned pip install 5 months ago

kind/enhancement good first issue check/Pinned-Dependencies

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

BUG: Gitlab Commits Before Date Needs More Logic 5 months ago

kind/bug good first issue gitlab

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Specify a user agent for OSV.dev 9 months ago

kind/enhancement good first issue check/Vulnerabilities

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Feature: Check custom CII Best Practices URL 9 months ago

kind/enhancement good first issue check/CII-Best-Practices

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Checking for pyup should be removed 12 months ago

kind/docs help wanted good first issue Check/Dependency-Update-Tool

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

BUG: Dangerous-Workflow doesn't trigger on `toJSON(github.event)` 12 months ago

kind/bug good first issue check/Dangerous-workflow

ossf/scorecard

5.6K

OpenSSF Scorecard - Security health metrics for Open Source

Go

#openssf-scorecard#scorecard

Open Issues Need Help