-
Notifications
You must be signed in to change notification settings - Fork 519
Issues: ossf/scorecard
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Author
Label
Projects
Milestones
Assignee
Sort
Issues list
Support more SAST Tooling for Maven Project
kind/enhancement
New feature or request
#4558
opened Mar 14, 2025 by
sbernard31
Check for Good for newcomers
help wanted
Community contributions welcome, maintainers supportive of idea but not a high priority
kind/enhancement
New feature or request
.yaml extension on config file, not only .yml extension
good first issue
#4552
opened Mar 9, 2025 by
mhucka
Ignore Development Dependencies in OSV scan
check/Vulnerabilities
kind/enhancement
New feature or request
#4550
opened Mar 6, 2025 by
aunovis-heidrich
Add HypothesisWorks/hypothesis as a fuzzer
kind/enhancement
New feature or request
#4549
opened Mar 5, 2025 by
szymonmaszke
HuggingFace Support
kind/enhancement
New feature or request
#4548
opened Mar 4, 2025 by
ButlerJoseph
BUG Probe for SAST throws nil pointer exception for some Repos
kind/bug
Something isn't working
#4531
opened Feb 19, 2025 by
aunovis-heidrich
BUG: code review score should exclude automated dependency updates
kind/bug
Something isn't working
#4500
opened Jan 23, 2025 by
monperrus
Align Dangerous Workflow check with CodeQL rules, or defer to it entirely
check/Dangerous-workflow
kind/enhancement
New feature or request
#4490
opened Jan 15, 2025 by
stone-z
Feature: Support GitHub Immutable Actions, don't enforce pinning by digest for those
check/Pinned-Dependencies
kind/enhancement
New feature or request
#4489
opened Jan 14, 2025 by
JPLachance
SA1019: grouper.IDAliases is deprecated
area/tech-debt
check/Vulnerabilities
kind/bug
Something isn't working
#4431
opened Dec 3, 2024 by
JamieMagee
Idea: Add some more projects to /projects.csv
kind/enhancement
New feature or request
Stale
#4392
opened Oct 25, 2024 by
hejjoe
BUG Pinned Dependency checks for nuget/.Net does not consider implicit restore
check/Pinned-Dependencies
kind/bug
Something isn't working
#4381
opened Oct 11, 2024 by
balteravishay
Feature: Pinned Dependency checks support for Azure DevOps Pipelines
check/Pinned-Dependencies
kind/enhancement
New feature or request
Stale
#4380
opened Oct 11, 2024 by
balteravishay
Support Composer (PHP) Package Manager
kind/enhancement
New feature or request
Stale
#4378
opened Oct 10, 2024 by
maennchen
Public GH repo is getting 422 Validation Failed
kind/bug
Something isn't working
#4352
opened Sep 18, 2024 by
diberry
Proposal: Improved experience for large-scale (multi-org, multi-repo) deployment of Scorecard
kind/enhancement
New feature or request
Stale
#4339
opened Sep 6, 2024 by
lelia
Proposal: Define clear expectations for Triager role in contributor ladder
kind/enhancement
New feature or request
Stale
#4338
opened Sep 5, 2024 by
lelia
Feature: Managed Github App per org instead of github action per repo
kind/enhancement
New feature or request
Stale
#4333
opened Sep 4, 2024 by
nitrocode
Method for providing certificates for private GitLab server
kind/enhancement
New feature or request
Stale
#4326
opened Aug 30, 2024 by
gcatto
Previous Next
ProTip!
Mix and match filters to narrow down what you’re looking for.