Repository navigation
setup ossf scorecard reporting for NodeSecure #21
Description
Hello 👋
I think it could be cool to configure and use @UlisesGascon OpenSSF Scorecard Monitor project to generate a markdown file with all scorecard scores from our org repositories.
See the following ongoing PR for an example: nodejs/security-wg#886
If anyone would like to contribute and help, please do not hesitate
Activity
UlisesGascon commentedon Mar 1, 2023
I will love to do it! 🎉
fraxken commentedon Mar 4, 2023
@UlisesGascon If you want to do it don't hesitate, I was waiting to see if some contributors would take the subject (but no one manifest interest).
feat: setup ossf scorecard reporting for NodeSecure
feat: setup ossf scorecard reporting for NodeSecure (#23)
fraxken commentedon Mar 17, 2023
@UlisesGascon doesn't seem to work, any idea why ? (I runned the workflow myself).
UlisesGascon commentedon Mar 18, 2023
Let me check, this is the expected output if there are no changes since the last analysis. So there is a bug, I will investigate it
chore: replicated bug in nodesecure
UlisesGascon commentedon Mar 18, 2023
I will do a PR to fix this. There is typo in the name. This
discovery-orgs: 'nodesecure'should be the same name as the github login value, in this casediscovery-orgs: 'NodeSecure'.The workflow didn't find any scoring for your organization as the OpenSSF Scorecard is case sensitive:
Full Debug log, just in case you want to explore it.
Note You can always run the Github Action in Debug mode, this can provide you a lot of info as I added some debug traces too 👍