Skip to content

Issues: ossf/scorecard

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
342 Open 784 Closed
342 Open 784 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Feature - Provide Remediation in results kind/enhancement New feature or request
#304 opened Mar 24, 2021 by naveensrinivasan
11 tasks
2
Uniformize checks based on time? kind/enhancement New feature or request
#381 opened Apr 30, 2021 by laurentsimon
New check: check that domains are validated kind/enhancement New feature or request
#405 opened May 5, 2021 by laurentsimon
Use app IDs to identify apps in CI-Test kind/enhancement New feature or request
#406 opened May 5, 2021 by laurentsimon
New check: check for dependency scanner kind/enhancement New feature or request
#413 opened May 7, 2021 by laurentsimon
New Check: time to fix security vuln kind/enhancement New feature or request
#548 opened Jun 4, 2021 by laurentsimon
Feature: Pin dependencies for Kubernetes kind/enhancement New feature or request
#564 opened Jun 9, 2021 by laurentsimon
Support Makefiles in dependency-pinning check check/Pinned-Dependencies good first issue Good for newcomers help wanted Community contributions welcome, maintainers supportive of idea but not a high priority kind/enhancement New feature or request
#884 opened Aug 23, 2021 by laurentsimon
BUG: dangerous workflow alerts when code is not run check/Dangerous-workflow kind/bug Something isn't working
#1771 opened Mar 22, 2022 by laurentsimon
BUG: Code-Review does not understand un-squashed commits check/Code-Review kind/bug Something isn't working
#1777 opened Mar 24, 2022 by laurentsimon
🐛 BUG found in the Security-Policy unit test & more testcases are needed check/Security-Policy kind/bug Something isn't working
#1954 opened May 24, 2022 by aidenwang9867
Improve Score Reporting: Branch-Protection check fails with -1 check/Branch-Protection good first issue Good for newcomers kind/bug Something isn't working
#2161 opened Aug 17, 2022 by azeemshaikh38
BUG: Incorrect line numbers for GitHub Actions workflows kind/bug Something isn't working priority/should-do Next few releases
#2490 opened Nov 26, 2022 by favonia
BUG: Scorecards fails to detect publishing workflow for Elixir check/Packaging kind/bug Something isn't working
#2564 opened Dec 22, 2022 by miguelnietoa
Feature: Add an owner to each probe kind/enhancement New feature or request
#3236 opened Jun 29, 2023 by laurentsimon Structured results
BUG: RequiresStrictStatusChecks wrongly reported by GitHub GraphQL API check/Branch-Protection kind/bug Something isn't working
#3255 opened Jul 10, 2023 by gabibguti
repo rules: enforce admin logic is an over-approximation check/Branch-Protection kind/bug Something isn't working
#3480 opened Sep 13, 2023 by spencerschrock
BUG: Dangerous-Workflow doesn't trigger on toJSON(github.event) check/Dangerous-workflow good first issue Good for newcomers kind/bug Something isn't working
#3554 opened Oct 10, 2023 by pnacht
Differentiate between runtime vulns and devtime vulns check/Vulnerabilities kind/enhancement New feature or request
#3604 opened Oct 24, 2023 by AdamKorcz Structured results
revisit finding creation API
#3649 opened Nov 7, 2023 by spencerschrock Structured results
should probes have their own raw data and supported request types?
#3718 opened Dec 7, 2023 by spencerschrock Structured results
collecting probe raw data should be parallelizable
#3719 opened Dec 7, 2023 by spencerschrock Structured results
Feature: Checks should support powershell scripts kind/enhancement New feature or request
#4253 opened Jul 23, 2024 by balteravishay
Proposal: Align Scorecard checks with S2C2F Maturity Level 2 requirements kind/enhancement New feature or request
#4296 opened Aug 12, 2024 by adriandiglio
BUG: CI-Tests and SAST internal error for private repository, full permissions granted kind/bug Something isn't working
#4307 opened Aug 21, 2024 by byangtri
ProTip! Follow long discussions with comments:>50.