Skip to content

Issues: ossf/scorecard

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
0 Open 710 Closed
0 Open 710 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Scorecard reports vulnerability to closed/fixed CVEs check/Vulnerabilities kind/bug Something isn't working
#4156 by randombit was closed Jun 8, 2024
2
Unlicense not accepted as FSF or OSI approved check/License kind/bug Something isn't working
#4144 by egecetin was closed Jun 6, 2024
1
4
Add @lelia as triager area/community Used for adding contributors, community outreach, etc.
#4136 by lelia was closed Jun 14, 2024
@spencerschrock
6
Why stepsecurity is refereneced so much? kind/bug Something isn't working
#4081 by anantshri was closed Jun 10, 2024
3
BUG Signed-Releases: internal error: too many releases, please report this check/Signed-Releases kind/bug Something isn't working
#4059 by cpswan was closed May 2, 2024
1
1
BUG: Code-Review missing review markers check/Code-Review kind/bug Something isn't working
#4038 by emaste was closed May 7, 2024
1
7
Existing OpenSSF best practices badge isn't added to a scorecard report check/CII-Best-Practices cron-job kind/bug Something isn't working
#4037 by yrusskih was closed May 8, 2024
4
Cleanup old error names before full v5 release area/tech-debt good first issue Good for newcomers
#4033 by spencerschrock was closed Apr 18, 2024 v5
1
@cmwylie19
2
improve binary artifact and license tests to match other checks area/testing check/Binary-Artifacts check/License good first issue Good for newcomers
#4032 by spencerschrock was closed May 3, 2024
1
@seelder
4
CI-tests used in Ledmon project was not detected
#3976 by ktanska was closed Mar 27, 2024
4
Github runs are warning/failing because of out of date node configuration kind/bug Something isn't working
#3968 by aiuto was closed Mar 22, 2024
1
1
Add @LappleApple as triager area/community Used for adding contributors, community outreach, etc.
#3962 by spencerschrock was closed Mar 21, 2024
4
BUG: pip install --upgrade pip in Dockerfile gets flagged kind/bug Something isn't working
#3953 by duggalsu was closed Mar 22, 2024
1
Feature: scoring arbitrary projects hosted on neither GitHub nor GitLab kind/enhancement New feature or request
#3945 by Amolith was closed Mar 13, 2024
2
BUG docs haven't been updated to say that Signed-Releases looks for .sigstore bundles. check/Signed-Releases good first issue Good for newcomers kind/bug Something isn't working
#3914 by cpswan was closed Mar 5, 2024
1
2
BUG .sigstore bundles are not being found by Signed-Releases check kind/bug Something isn't working
#3913 by cpswan was closed May 9, 2024
6
Feature: Skip .git folder in localdir client good first issue Good for newcomers kind/enhancement New feature or request
#3908 by pnacht was closed Mar 13, 2024
1
@naveensrinivasan
cleanup branch protection tests area/tech-debt area/testing check/Branch-Protection
#3904 by spencerschrock was closed Mar 15, 2024 Structured results
1
@spencerschrock
scorecard started reducing score for vulnerabilities in unrelated packages that aren't imported check/Vulnerabilities kind/bug Something isn't working
#3891 by x448 was closed Mar 6, 2024
2
4
BUG: License LGPL-2.1-only not discovered check/License good first issue Good for newcomers kind/bug Something isn't working
#3869 by berndgassmann was closed Feb 13, 2024
5
Feature: Rename OutcomePositive/Negative to something more aligned with the security implication of a probe finding kind/enhancement New feature or request needs discussion
#3866 by pnacht was closed Apr 8, 2024 Structured results
1
2
CodeReviewID appears twice and upload fails with "contains duplicate item" kind/bug Something isn't working
#3865 by faximan was closed Feb 8, 2024
2
Feature: New Check "Permissive License" kind/enhancement New feature or request
#3840 by fhoeborn was closed Apr 12, 2024
1
5
Avoiding probe explosion and boilerplate
#3824 by spencerschrock was closed Mar 28, 2024 Structured results
1
2
Feature kind/enhancement New feature or request
#3812 by bos37 was closed Jan 19, 2024
ProTip! Find all open issues with in progress development work with linked:pr.