OpenSSF Scorecard analysis

[planetf1]

Is there an existing issue for this?

• [X] I have searched the existing issues

Please describe the new behavior that that will improve Egeria

https://github.com/ossf/scorecard-action/tree/v2.0.0-beta.1 has an action that does a scorecard assessment on a repository.

Given concerns on security, and the work being done by the ossify to promote supply chain security, it would be useful to take a look at this action to see if it can help us, and the data can also be published to provide more confidence to consumers of our projects.

This applies across all our repos

Alternatives

n/a

Any Further Information?

none

Would you be prepared to be assigned this issue to work on?

• [X] I can work on this

[planetf1]

The scan has now been added to base egeria. Issues will be reported to the security tab ie https://github.com/odpi/egeria/security/code-scanning?query=is%3Aopen+branch%3Amaster+tool%3AScorecard

[github-actions[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 20 days if no further activity occurs. Thank you for your contributions.

[github-actions[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 20 days if no further activity occurs. Thank you for your contributions.