Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improvement of OpenSSF Scorecard Score #10457

Open
2 of 4 tasks
harshitasao opened this issue Aug 15, 2024 · 1 comment
Open
2 of 4 tasks

Improvement of OpenSSF Scorecard Score #10457

harshitasao opened this issue Aug 15, 2024 · 1 comment

Comments

@harshitasao
Copy link
Contributor

harshitasao commented Aug 15, 2024

Hi, I'm Harshita. I’m working with CNCF and the Google Open Source Security Team for the GSoC 2024 term. We are collaborating to enhance security practices across various CNCF projects. The goal is to improve security for all CNCF projects by both using OpenSSF Scorecards and implementing its security improvements.

After the opening of the scorecard action addition PR, I'm here to increase the final score by going over each check. I've listed all of the checks where work needs to be done, in order of its criticality. I plan to submit each PR for each fix. Please let me know what you think and for which ones a PR is welcome that I will submit it ASAP.

Current Score: 6.3

Scorecard report: https://scorecard.dev/viewer/?uri=github.com/strimzi/strimzi-kafka-operator

Here's a few checks we can work on to improve the project's security posture [ in order of its criticality ]:

/cc @joycebrum @diogoteles08 @pnacht @nate-double-u

@scholzj
Copy link
Member

scholzj commented Aug 22, 2024

Discussed on a community call on 22.8.2024: These are useful things, so this issue should be kept.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants