-
Notifications
You must be signed in to change notification settings - Fork 8
Include OpenSSF scorecard tool #129
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
| "description": "OpenSSF Scorecard is a tool that automatically evaluates the security health of open source projects. It runs checks on best practices like branch protection, dependency management, and code review, then produces a score to help maintainers and users assess project risk.", | ||
| "hasQualityDimension": [ | ||
| { "@id": "dim:Security", "@type": "@id" }, | ||
| { "@id": "dim:Maintainability", "@type": "@id" }, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| { "@id": "dim:Maintainability", "@type": "@id" }, | |
| { "@id": "dim:maintainability", "@type": "@id" }, |
| "hasQualityDimension": [ | ||
| { "@id": "dim:Security", "@type": "@id" }, | ||
| { "@id": "dim:Maintainability", "@type": "@id" }, | ||
| { "@id": "dim:Sustainability", "@type": "@id" } |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| { "@id": "dim:Sustainability", "@type": "@id" } | |
| { "@id": "dim:sustainability", "@type": "@id" } |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
the instances are non-capital in the identifiers of dimensions and indicators. I know it's a bit confusing, but I set it up that way and now we should not change the ids :S
| "howToUse": ["CI/CD", "command-line"], | ||
| "isAccessibleForFree": true, | ||
| "license": "https://spdx.org/licenses/Apache-2.0", | ||
| "name": "scorecard", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| "name": "scorecard", | |
| "name": "OpenSSF Scorecard", |
dgarijo
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Small suggestions. Please have a look
Co-authored-by: Daniel Garijo <dgarijov@gmail.com>
|
@dgarijo I think validate checks are failing with your suggestions. @vuillaut, @shraddha-bajare, any suggestions on this? |
|
Yes, there is an error in the script.
|
|
Just note, though, that most of the tools already included in TechRadar have dimensions in capital letters |
|
yes, that's an error. We can change it, I think it's not a big deal. They are pointing to the wrong identifiers at the moment. I will sort it out with Thomas |
Closes #127.