Skip to content

Conversation

@npechl
Copy link
Contributor

@npechl npechl commented Oct 2, 2025

Closes #127.

@npechl npechl marked this pull request as ready for review October 2, 2025 09:03
"description": "OpenSSF Scorecard is a tool that automatically evaluates the security health of open source projects. It runs checks on best practices like branch protection, dependency management, and code review, then produces a score to help maintainers and users assess project risk.",
"hasQualityDimension": [
{ "@id": "dim:Security", "@type": "@id" },
{ "@id": "dim:Maintainability", "@type": "@id" },
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
{ "@id": "dim:Maintainability", "@type": "@id" },
{ "@id": "dim:maintainability", "@type": "@id" },

"hasQualityDimension": [
{ "@id": "dim:Security", "@type": "@id" },
{ "@id": "dim:Maintainability", "@type": "@id" },
{ "@id": "dim:Sustainability", "@type": "@id" }
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
{ "@id": "dim:Sustainability", "@type": "@id" }
{ "@id": "dim:sustainability", "@type": "@id" }

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the instances are non-capital in the identifiers of dimensions and indicators. I know it's a bit confusing, but I set it up that way and now we should not change the ids :S

"howToUse": ["CI/CD", "command-line"],
"isAccessibleForFree": true,
"license": "https://spdx.org/licenses/Apache-2.0",
"name": "scorecard",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
"name": "scorecard",
"name": "OpenSSF Scorecard",

Copy link
Contributor

@dgarijo dgarijo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Small suggestions. Please have a look

Co-authored-by: Daniel Garijo <dgarijov@gmail.com>
@npechl
Copy link
Contributor Author

npechl commented Oct 2, 2025

@dgarijo I think validate checks are failing with your suggestions.

@vuillaut, @shraddha-bajare, any suggestions on this?

@dgarijo
Copy link
Contributor

dgarijo commented Oct 2, 2025

Yes, there is an error in the script.
I will open an issue. I have to take action to:

  • Make sure we add the "dim" namespace in the context.
  • The dimensions are in non-capital letters.

@npechl
Copy link
Contributor Author

npechl commented Oct 2, 2025

Just note, though, that most of the tools already included in TechRadar have dimensions in capital letters

@dgarijo
Copy link
Contributor

dgarijo commented Oct 2, 2025

yes, that's an error. We can change it, I think it's not a big deal. They are pointing to the wrong identifiers at the moment. I will sort it out with Thomas

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

OpenSSF tool is missing

2 participants