Skip to content

Issues: ossf/scorecard

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

318 Open 763 Closed
318 Open 763 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

BUG: Scorecards for public repositories without issues sections won't be created kind/bug Something isn't working
#4150 opened Jun 6, 2024 by nwse-che
1
[Docs] Clarify licensing information for bigquery public dataset area/bigquery kind/docs Improvements or additions to documentation
#4143 opened Jun 5, 2024 by sriumcp
2
Add @lelia as triager area/community Used for adding contributors, community outreach, etc.
#4136 opened May 30, 2024 by lelia
2
Gap Analysis - Concise Guide for Evaluating Open Source Software kind/enhancement New feature or request needs discussion
#4124 opened May 24, 2024 by afmarcum
Feature: Check for SBOMs in CI/CD Artifacts as well as releases kind/enhancement New feature or request
#4119 opened May 21, 2024 by ashearin
@ashearin
Use GItHub attestations to check for signed releases check/Signed-Releases kind/enhancement New feature or request
#4080 opened May 4, 2024 by edgarrmondragon
2
Feature: Recognize Cirrus-CI as a well-known CI kind/enhancement New feature or request
#4075 opened May 2, 2024 by emaste
Feature: Service Status Page kind/enhancement New feature or request
#4074 opened May 2, 2024 by jeffmendoza
✨Creating the Scorecard Universe ✨ area/community Used for adding contributors, community outreach, etc. kind/docs Improvements or additions to documentation
#4073 opened May 1, 2024 by justaugustus
10 of 17 tasks
@justaugustus
3
BUG: Unrecognized CI/CDs kind/bug Something isn't working
#4050 opened Apr 24, 2024 by gabibguti
4
support querying platform specific API capabilities in RepoClient area/api kind/enhancement New feature or request
#4049 opened Apr 22, 2024 by spencerschrock
2
BUG: Patch Maintainers Annotations kind/bug Something isn't working
#4048 opened Apr 22, 2024 by gabibguti
5 of 12 tasks
Maintainer Annotations
@spencerschrock @raghavkaul
3
Parts of security scorecard doesn't allow excluding issues from scoring when they have no affect on an end-user kind/bug Something isn't working
#4036 opened Apr 15, 2024 by yrusskih
4
update the SPDX license list check/License good first issue Good for newcomers kind/enhancement New feature or request
#4031 opened Apr 15, 2024 by spencerschrock
@lelia
2
Include human friendly links for the GitHub artifacts for Signed-Releases check/Signed-Releases good first issue Good for newcomers kind/enhancement New feature or request
#4030 opened Apr 15, 2024 by spencerschrock
@schaeferka
1
Specify a user agent for OSV.dev check/Vulnerabilities good first issue Good for newcomers kind/enhancement New feature or request
#4029 opened Apr 15, 2024 by spencerschrock
@krol3
1
the Signed-Releases remediation steps encourage manual manipulation of the source code archives check/Signed-Releases kind/docs Improvements or additions to documentation
#4018 opened Apr 9, 2024 by junyer
Contribution account age as a factor kind/enhancement New feature or request
#4000 opened Apr 3, 2024 by joubin
BUG: Issues with contributor scoring kind/bug Something isn't working
#3996 opened Apr 3, 2024 by siralmat
1
"Vulnerabilities" check: unclear description ("open vulnerabilities") kind/enhancement New feature or request
#3994 opened Apr 3, 2024 by Chealer
README: Unable to query Public data using BigQuery Explorer kind/bug Something isn't working
#3989 opened Apr 2, 2024 by Chealer
4
README/FAQ: Unclear references to "the webviewer" kind/docs Improvements or additions to documentation
#3986 opened Apr 2, 2024 by Chealer
1
Feature: Add machine-readable remediation to the hasDangerousWorkflowScriptInjection probe check/Dangerous-workflow kind/enhancement New feature or request needs discussion question Further information is requested
#3950 opened Mar 18, 2024 by pnacht
Vulnerable package has score 10/10 in Vulnerabilities check/Vulnerabilities kind/bug Something isn't working kind/enhancement New feature or request
#3946 opened Mar 13, 2024 by jorgsowa
1
Feature: Probe whether repo has up-to-date CODEOWNERS check/Contributors check/Maintained good first issue Good for newcomers kind/enhancement New feature or request
#3931 opened Mar 10, 2024 by raghavkaul
@schaeferka
4
ProTip! What’s not been updated in a month: updated:<2024-05-12.