Skip to content

Issues: ossf/scorecard

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
236 Open 295 Closed
236 Open 295 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Feature: Pinned Dependency checks support for Azure DevOps Pipelines check/Pinned-Dependencies kind/enhancement New feature or request
#4380 opened Oct 11, 2024 by balteravishay
1
Support Composer (PHP) Package Manager kind/enhancement New feature or request
#4378 opened Oct 10, 2024 by maennchen
Proposal: Improved experience for large-scale (multi-org, multi-repo) deployment of Scorecard kind/enhancement New feature or request
#4339 opened Sep 6, 2024 by lelia
Proposal: Define clear expectations for Triager role in contributor ladder kind/enhancement New feature or request
#4338 opened Sep 5, 2024 by lelia
Feature: Managed Github App per org instead of github action per repo kind/enhancement New feature or request
#4333 opened Sep 4, 2024 by nitrocode
2
Method for providing certificates for private GitLab server kind/enhancement New feature or request
#4326 opened Aug 30, 2024 by gcatto
Feature: Check custom CII Best Practices URL kind/enhancement New feature or request
#4315 opened Aug 27, 2024 by jmgate
3
Proposal: Align Scorecard checks with S2C2F Maturity Level 2 requirements kind/enhancement New feature or request
#4296 opened Aug 12, 2024 by adriandiglio
Documentation: Document how to call Scorecard as a library. kind/docs Improvements or additions to documentation kind/enhancement New feature or request
#4258 opened Jul 25, 2024 by jeffmendoza
3 tasks
@jeffmendoza
1
Feature scorecard.Run() should take a leveled logging object/interface instead of or alternatively to log level. kind/enhancement New feature or request
#4257 opened Jul 25, 2024 by jeffmendoza
2
Feature: scorecard.Run() should accept an http.RoundTripper to be used for all outgoing http requests kind/enhancement New feature or request
#4256 opened Jul 25, 2024 by jeffmendoza
2
Feature: Checks should support powershell scripts kind/enhancement New feature or request
#4253 opened Jul 23, 2024 by balteravishay
restore ability to see individual PR results for SAST and Code-Review and document it check/Code-Review check/SAST kind/enhancement New feature or request
#4245 opened Jul 17, 2024 by spencerschrock
1
Feature: support gitea forge kind/enhancement New feature or request
#4209 opened Jul 3, 2024 by 6543
2
Test for security policy in other places than SECURITY.md check/Security-Policy kind/enhancement New feature or request
#4192 opened Jun 24, 2024 by CsatariGergely
4
CI check to check the results of CI tests check/CI-Tests kind/enhancement New feature or request
#4191 opened Jun 24, 2024 by CsatariGergely
2
Feature: Support for Azure DevOps kind/enhancement New feature or request
#4177 opened Jun 15, 2024 by JamieMagee
2
Gap Analysis - Concise Guide for Evaluating Open Source Software kind/enhancement New feature or request needs discussion Stale
#4124 opened May 24, 2024 by afmarcum
1
Feature: Check for SBOMs in CI/CD Artifacts as well as releases kind/enhancement New feature or request Stale
#4119 opened May 21, 2024 by ashearin
@ashearin
1
Use GItHub attestations to check for signed releases check/Signed-Releases kind/enhancement New feature or request
#4080 opened May 4, 2024 by edgarrmondragon
4
Feature: Recognize Cirrus-CI as a well-known CI kind/enhancement New feature or request Stale
#4075 opened May 2, 2024 by emaste
1
Feature: Service Status Page kind/enhancement New feature or request Stale
#4074 opened May 2, 2024 by jeffmendoza
1
support querying platform specific API capabilities in RepoClient area/api kind/enhancement New feature or request Stale
#4049 opened Apr 22, 2024 by spencerschrock
3
Specify a user agent for OSV.dev check/Vulnerabilities good first issue Good for newcomers kind/enhancement New feature or request
#4029 opened Apr 15, 2024 by spencerschrock
@krol3
1
Contribution account age as a factor kind/enhancement New feature or request Stale
#4000 opened Apr 3, 2024 by joubin
1
ProTip! Exclude everything labeled bug with -label:bug.