Skip to content

chore: add support for OSSF scorecard reporting #984

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
UlisesGascon merged 1 commit into from
May 14, 2024
Merged

chore: add support for OSSF scorecard reporting #984

UlisesGascon merged 1 commit into from
May 14, 2024

Conversation

@inigomarquinez
Copy link
Member

@inigomarquinez inigomarquinez commented May 10, 2024

Main Changes

This pipeline will proactively report the status of the project (every day and when a push is done to master branch) including critical fields (CI-Tests, Contributors, Dependency-Update-Tool, Webhooks) that are missing while running via OSSF cron jobs.

Context

Changes related

It's also possible that some repositories in your organization are already being automatically tracked by OpenSSF in this CSV file via weekly cronjob. One caveat: Automatically tracked projects do not include ossf/scorecard#3438 in their analysis (CI-Tests,Contributors,Dependency-Update-Tool,Webhooks).
Source: openssf-scorecard-monitor documentation

Team discussion related

UlisesGascon
UlisesGascon approved these changes May 10, 2024
View reviewed changes
Copy link
Member

@UlisesGascon UlisesGascon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

UlisesGascon
UlisesGascon approved these changes May 10, 2024
View reviewed changes
Copy link
Member

@UlisesGascon UlisesGascon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@UlisesGascon UlisesGascon merged commit 8f0a1c4 into expressjs:master May 14, 2024
@inigomarquinez inigomarquinez deleted the feat/add-scorecard branch May 16, 2024 06:34
@MilkaChucky MilkaChucky mentioned this pull request Oct 10, 2024
Merged
@phamngocduy phamngocduy mentioned this pull request Oct 30, 2024
Open
@Metasebiya-21 Metasebiya-21 mentioned this pull request Oct 30, 2024
Open
@Dmitry-White Dmitry-White mentioned this pull request Oct 30, 2024
Open
@sharmasantosh4829 sharmasantosh4829 mentioned this pull request Oct 31, 2024
Open
@FaroukAmr FaroukAmr mentioned this pull request Oct 31, 2024
Open
@hamzabetbaieb hamzabetbaieb mentioned this pull request Nov 1, 2024
Open
@MiguelPelegrina MiguelPelegrina mentioned this pull request Nov 1, 2024
Open
@GiselaMendez GiselaMendez mentioned this pull request Nov 2, 2024
Open
@Lim-Stanley Lim-Stanley mentioned this pull request Nov 2, 2024
Open
@renecossio renecossio mentioned this pull request Nov 2, 2024
Open
@cristv95 cristv95 mentioned this pull request Nov 3, 2024
Open
@vanecatlla vanecatlla mentioned this pull request Nov 3, 2024
Open
@eufelipemateus eufelipemateus mentioned this pull request Nov 3, 2024
Open
@HUGO-AppSec HUGO-AppSec mentioned this pull request Nov 3, 2024
Open
@lennyflores lennyflores mentioned this pull request Nov 4, 2024
Open
@Laa7ad Laa7ad mentioned this pull request Nov 4, 2024
Open
@andreacastro andreacastro mentioned this pull request Nov 4, 2024
Open
@yasminatm1 yasminatm1 mentioned this pull request Nov 4, 2024
Open
@nathanpereira1234 nathanpereira1234 mentioned this pull request Nov 4, 2024
Open
@wingsofrex wingsofrex mentioned this pull request Nov 4, 2024
Open
@Whatar Whatar mentioned this pull request Nov 5, 2024
Open
@vicda9 vicda9 mentioned this pull request Nov 5, 2024
Open
@omkar-ok omkar-ok mentioned this pull request Nov 5, 2024
Closed
@estheryolanda estheryolanda mentioned this pull request Nov 6, 2024
Open
@DilanOjeda DilanOjeda mentioned this pull request Nov 6, 2024
Open
@booka39 booka39 mentioned this pull request Nov 6, 2024
Open
@ebiyekunoun ebiyekunoun mentioned this pull request Nov 7, 2024
Open
@Regexec67 Regexec67 mentioned this pull request Nov 7, 2024
Open
@justinpatterson1 justinpatterson1 mentioned this pull request Nov 7, 2024
Open
@ShantanuBadmanji ShantanuBadmanji mentioned this pull request Nov 7, 2024
Open
@Annie11-maker Annie11-maker mentioned this pull request Nov 8, 2024
Open
@mgutierrez-fms mgutierrez-fms mentioned this pull request Nov 8, 2024
Open
@Bet-Security Bet-Security mentioned this pull request Nov 8, 2024
Open
@Karthik2396 Karthik2396 mentioned this pull request Nov 8, 2024
Open
@maciel-j maciel-j mentioned this pull request Nov 8, 2024
Open
@AlexBarbatsalos AlexBarbatsalos mentioned this pull request Nov 9, 2024
Open
@xrumdik xrumdik mentioned this pull request Nov 9, 2024
Open
@EreShaw EreShaw mentioned this pull request Nov 9, 2024
Open
@joedean-git joedean-git mentioned this pull request Nov 9, 2024
Open
@KMG1998 KMG1998 mentioned this pull request Nov 10, 2024
Open
@Akash-0917 Akash-0917 mentioned this pull request Nov 10, 2024
Open
@BenDrKo BenDrKo mentioned this pull request Nov 11, 2024
Open
@LeoMuchuki LeoMuchuki mentioned this pull request Nov 13, 2024
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@UlisesGascon UlisesGascon UlisesGascon approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@inigomarquinez @UlisesGascon