ossf / scorecard-monitor

Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts
https://github.com/marketplace/actions/openssf-scorecard-monitor
Apache License 2.0
32 stars 13 forks source link

Show the scorecard badges in the table #45

Closed rajbos closed 1 year ago

rajbos commented 1 year ago

I'd like to show the information in the table with a badge similar to what I have done in my org readme here:

image

Setup is like this: [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/devops-actions/issue-comment-tag/badge)](https://api.securityscorecards.dev/projects/github.com/devops-actions/issue-comment-tag)

UlisesGascon commented 1 year ago

I like the idea!

I think we can implement this with an opcional flag like render-badge. If the flag is positive then in the templates we can replace the pure number in the Score column for the badge.

UlisesGascon commented 1 year ago

Do you want to help with the implementation, @rajbos?

rajbos commented 1 year ago

@UlisesGascon: yes! I'll try to setup a concept for it.

rajbos commented 1 year ago

Working on it here. Does deps.dev have badges as well? If so I'll make the url variable up front.

image

UlisesGascon commented 1 year ago

Seems super good! As far I know deps.dev doesn't have badges so we can ignore it 👍