Improve CLO Monitor score - Githubissues

nephio-project / nephio

Nephio is a Kubernetes-based automation platform for deploying and managing highly distributed, interconnected workloads such as 5G Network Functions, and the underlying infrastructure on which those workloads depend.

Apache License 2.0

93 stars 52 forks source link

Improve CLO Monitor score #536

Open VedRatan opened 4 months ago

VedRatan commented 4 months ago

Nephio R2

Description

See: https://www.cncf.io/reports/security-slam-north-america-2022/

Nephio has CLOMonitor score of 55% - the goal is to be at 100%

Here is the current lists of task to fix:

[x] #545
[x] #553
[ ] #552
[ ] #551
[x] #550
[ ] #547
[ ] #546
[x] #548
[ ] #549

https://clomonitor.io/projects/lfnetworking/nephio

We can check how other projects achieved 100% :

https://clomonitor.io/projects/cncf/capsule https://clomonitor.io/projects/cncf/cloudevents https://clomonitor.io/projects/cncf/artifact-hub https://clomonitor.io/projects/cncf/kyverno

VedRatan commented 3 months ago

We are improving on CLOMonitor score as well as OpenSSF score @nyrahul @henderiw @liamfallon @electrocucaracha

electrocucaracha commented 3 months ago

@efiacor has been having some issues to make PROW and GitHub actions work together, so the score card assumes that we are only using GH actions?