cncf / clomonitor

CLOMonitor is a tool that periodically checks open source projects repositories to verify they meet certain project health best practices
https://clomonitor.io
Apache License 2.0
112 stars 74 forks source link

Port CLOMonitor Checks to OpenSSF Scorecard Checks #1466

Open caniszczyk opened 6 months ago

caniszczyk commented 6 months ago

There's a lot of overlap between CLOMonitor and Scorecard checks: https://github.com/ossf/scorecard/blob/main/docs/checks.md

Ideally I'd like to port all CNCF CLOMonitor checks to Scorecard and under the covers just call Scorecard (like we do for the security checks)

caniszczyk commented 6 months ago

@tegioz let's catch up on this, there's a strategic reason we want to do this across the LF ecosystem

tegioz commented 6 months ago

Sure 👍