search

in-toto / in-toto-golang

A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
https://in-toto.io/
Other
120 stars 50 forks source link

Add OpenSSF Scorecards #247

Open adityasaky opened 1 year ago

adityasaky commented 1 year ago

We should add OpenSSF scorecard to this repository.

Reference: https://github.com/ossf/scorecard

viveksahu26 commented 7 months ago

Hey @adityasaky, could you please assign me this? I want to work on it.

viveksahu26 commented 7 months ago

Hey @adityasaky, a question, should we also register this project to OpenSSF Best practice.

adityasaky commented 7 months ago

Hey @adityasaky, a question, should we also register this project to OpenSSF Best practice.

I'm not sure. We have in-toto/in-toto registered already. We ought to reevaluate this in the context of witness / go-witness as well. cc @jkjell