scorecard-action
Official GitHub Action for OpenSSF Scorecard.
Tech stack & purpose
Scorecard-action is the official GitHub Action for OpenSSF Scorecard, a tool that assesses the security posture of open-source projects. The action runs security scans on repositories and integrates results into GitHub's code scanning dashboard through SARIF format output, supporting public repositories and private repositories with GitHub Advanced Security. Built primarily in Go and Bash, the project includes components for installing the action across multiple repositories via command-line tooling and comprehensive end-to-end testing infrastructure. The Open Source Security Foundation (OSSF) maintains this project, which supports various GitHub workflow triggers and offers result publishing through REST APIs and repository badges.
Languages
Contributors
- dependabot[bot]421 commits · 0 followers
- laurentsimon61 commits
- Spencer Schrock52 commits
- Naveen22 commits · 197 followers
- Azeem Shaikh20 commits
- Rohan Khandelwal17 commits
- naveen9 commits
- Stephen Augustus (he/him)6 commits
- olivekl5 commits
- Rob Bos4 commits
- Jauder Ho3 commits
- Joyce2 commits
- David Rodríguez2 commits
- naveensrinivasan2 commits
- Josh Soref2 commits · 784 followers
- Jonas Bushart1 commits
- Chris Carini1 commits
- Jeremiah Howard1 commits
- Radoslav Gatev1 commits
- Pedro Nacht1 commits
- Jan Macku1 commits
- Abir Majumdar1 commits
- Bob Callaway1 commits
- Ahmed AbouZaid1 commits
- Jan Kowalleck1 commits
- Timothy Lee1 commits
- Jamie Tanna1 commits
- David A. Wheeler1 commits
- pankajtaneja51 commits
