You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I'd like to suggest a tool that might help on tracking supply-chain security practice improvements, which is the OpenSSF Scorecard Action
It proactively runs the Scorecard on the repository and warn you in case of any Security Practice that may have changed (example: a new workflow was created without top level permissions).
Would you be interested in a PR which adds this Action? Optionally it can also publish your results to the OpenSSF REST API, which allows a badge with the project's score to be added to its README.
Example:
In case of doubts or concerns you can try to check Scorecards FAQ. Anyway, feel free to reach out to me, I'll be happy to help or gather feedback.
The text was updated successfully, but these errors were encountered:
Hi again,
I'd like to suggest a tool that might help on tracking supply-chain security practice improvements, which is the OpenSSF Scorecard Action
It proactively runs the Scorecard on the repository and warn you in case of any Security Practice that may have changed (example: a new workflow was created without top level permissions).
The action has been adopted by 1800+ projects, having some prominent users such as Tensorflow, Angular, Flutter, sos.dev and deps.dev.
Would you be interested in a PR which adds this Action? Optionally it can also publish your results to the OpenSSF REST API, which allows a badge with the project's score to be added to its README.
Example:
![image](https://private-user-images.githubusercontent.com/22223372/253670850-755f11cc-9b96-416b-853c-86dce88a723c.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.tlshE5DCVuSEIz-g-uKaKbEmZtoUysCQThp5crY4LZ0)
In case of doubts or concerns you can try to check Scorecards FAQ. Anyway, feel free to reach out to me, I'll be happy to help or gather feedback.
The text was updated successfully, but these errors were encountered: