search

ljharb / repo-report

CLI to list all repos a user has access to, and report on their configuration in aggregate.
MIT License
24 stars 11 forks source link

Add OpenSSF score #63

Open ljharb opened 2 years ago

ljharb commented 2 years ago

Using this workflow: https://github.com/marketplace/actions/ossf-scorecard-action i suspect we can extract a command, so we could provide the score for every repo.

if the computation is expensive, then we may want to consider making this score be opt-in instead of visible by default, and we may want aggressive caching.

Riyabelle25 commented 2 years ago

Hiya @ljharb As per our discussion in the last Maintainer's call, I'll be trying my hand at this

Riyabelle25 commented 2 years ago

Heya @ljharb As promised, here are the code changes that implement openssf in repo-report. I tried to make it as neat as possible- lemme know what possible direction we can take from here