ossf / scorecard

OpenSSF Scorecard - Security health metrics for Open Source
https://scorecard.dev
Apache License 2.0
4.46k stars 489 forks source link

📖 Add repository guidelines e.g., for project donations #4123

Closed justaugustus closed 4 months ago

justaugustus commented 4 months ago

What kind of change does this PR introduce?

(Is it a bug fix, feature, docs update, something else?)

ref: https://github.com/ossf/scorecard/issues/4073, https://github.com/ossf/scorecard/issues/3204, https://github.com/UlisesGascon/openssf-scorecard-monitor/pull/74

What is the current behavior?

What is the new behavior (if this is a feature change)?**

Which issue(s) this PR fixes

Special notes for your reviewer

Does this PR introduce a user-facing change?

For user-facing changes, please add a concise, human-readable release note to the release-note

(In particular, describe what changes users might need to make in their application as a result of this pull request.)

NONE
justaugustus commented 4 months ago

Tagging @UlisesGascon for review on this, as he's actively running through the process in https://github.com/ossf/scorecard/issues/3204, https://github.com/UlisesGascon/openssf-scorecard-monitor/pull/74.

justaugustus commented 4 months ago

Ignoring the TODOs LGTM. Is your intent to remove them in this PR?

@spencerschrock — those TODOs need to be addressed in a follow-up. They're items that were present in the Kubernetes guidelines that we should solve for, but aren't blocking to bootstrap the docs.