Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Scorecard #52

Merged
merged 8 commits into from
Aug 19, 2024
Merged

Scorecard #52

merged 8 commits into from
Aug 19, 2024

Conversation

bcodesido
Copy link
Member

Implement OpenSSF Scorecard

  • Adds scorecard GitHub Action.
  • Configures Dependabot.
  • Adds SECURITY.md file.
  • Adds dependency-review Action.
  • Configures CodeQL.
  • Hardcodes actions versions by hashes.
  • Hardcodes container image version by sha256hash.

@bcodesido bcodesido marked this pull request as ready for review August 16, 2024 17:18
@bcodesido bcodesido requested a review from a team as a code owner August 16, 2024 17:18
Comment on lines 33 to 34
if: ${{ matrix.language == 'java' }}
run: ./configure.sh
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we need this here?

SECURITY.md Outdated

## Responsible Disclosure

For all security related issues, XXX has two main points of contact. Reach us at <[email protected]> or use the GitHub Security Advisory ["Report a Vulnerability"](https://github.com/rsksmart/rootstock-integration-tests/security/advisories/new) tab.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

XXX?

Copy link

@marcos-iov marcos-iov merged commit 5a107d3 into main Aug 19, 2024
8 checks passed
@marcos-iov marcos-iov deleted the scorecard branch August 19, 2024 12:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants