Improve scorecard results - Githubissues

oasis-open / cti-python-stix2

OASIS TC Open Repository: Python APIs for STIX 2

https://stix2.readthedocs.io/

BSD 3-Clause "New" or "Revised" License

364 stars 119 forks source link

Improve scorecard results #554

Open ejratl opened 2 years ago

ejratl commented 2 years ago

The OpenSSF Scorecard project scans GitHub repos for secure practices. It has given this project a 4. See the attached JSON document for the full rationale. It would be nice to improve this score over time.

bquxjob_58fe6f0e_182c73e5b54.json.txt

Easy to fix items include

[ ] Making sure that there is always a review of a PR before committing it
[ ] Adding read only access control to GitHub workflow actions
[ ] Work on a Best Practices Badge
[ ] Publish a security policy