diff --git a/data/software-tools/openssfscorecard.json b/data/software-tools/openssfscorecard.json new file mode 100644 index 0000000..38bc768 --- /dev/null +++ b/data/software-tools/openssfscorecard.json @@ -0,0 +1,20 @@ +{ + "@context": "https://w3id.org/everse/rs#", + "@id": "https://w3id.org/everse/tools/scorecard", + "@type": "SoftwareApplication", + "applicationCategory": [ + { "@id": "rs:ResearchInfrastructureSoftware", "@type": "@id" }, + { "@id": "rs:PrototypeTool", "@type": "@id" } + ], + "description": "OpenSSF Scorecard is a tool that automatically evaluates the security health of open source projects. It runs checks on best practices like branch protection, dependency management, and code review, then produces a score to help maintainers and users assess project risk.", + "hasQualityDimension": [ + { "@id": "dim:security", "@type": "@id" }, + { "@id": "dim:Maintainability", "@type": "@id" }, + { "@id": "dim:Sustainability", "@type": "@id" } + ], + "howToUse": ["CI/CD", "command-line"], + "isAccessibleForFree": true, + "license": "https://spdx.org/licenses/Apache-2.0", + "name": "scorecard", + "url": "https://github.com/ossf/scorecard" +}