100% score on clomonitor's security section. - Githubissues

open-feature / open-feature-operator

A Kubernetes feature flag operator

https://openfeature.dev

Apache License 2.0

167 stars 33 forks source link

100% score on clomonitor's security section. #139

Open justinabrahms opened 1 year ago

justinabrahms commented 1 year ago

https://clomonitor.io/projects/cncf/openfeature

eddie-knight commented 1 year ago

CLOMonitor report

Summary

Repository: open-feature-operator URL: https://github.com/open-feature/open-feature-operator Checks sets: CODE Score: 69

Checks passed per category

Category	Score
Documentation	100%
License	75%
Best Practices	31%
Security	65%
Legal	n/a

Checks

Documentation [100%]

License [75%]

[x] Apache-2.0 (docs)
[x] Approved license (docs)
[ ] License scanning (docs)

Best Practices [31%]

[x] Artifact Hub badge (docs)
[x] Contributor License Agreement (docs) EXEMPT
[x] Developer Certificate of Origin (docs)
[x] OpenSSF badge (docs)
[x] Recent release (docs)

Security [65%]

[x] Binary artifacts (docs)
[x] Code review (docs)
[x] Dangerous workflow (docs)
[ ] Dependency update tool (docs)
[x] Maintained (docs)
[ ] Software bill of materials (SBOM) (docs)
[x] Security policy (docs)
[ ] Signed releases (docs)
[ ] Token permissions (docs)

For more information about the checks sets available and how each of the checks work, please see the CLOMonitor's documentation.