-
Notifications
You must be signed in to change notification settings - Fork 60
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
OpenSSF Scorecard Incubating application #390
Conversation
Signed-off-by: Stephen Augustus <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I stronlgy voice my support of our Scorecard team moving up to our Incubating level
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Really exciting to see Scorecards reach this stage!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I have a clarification question around Scorecard and Allstar (that maybe was just a copy-paste error)?
Otherwise, I strongly support OpenSSF Scorecard becoming incubating. Its adoption is well past the point of a sandbox project.
- Raghav Kaul, Google, [@raghavkaul](https://github.com/raghavkaul) | ||
- Jeff Mendoza, Kusari, [@jeffmendoza](https://github.com/jeffmendoza) | ||
- Spencer Schrock, Google, [@spencerschrock](https://github.com/spencerschrock) | ||
- Laurent Simon, Independent, [@laurentsimon](https://github.com/laurentsimon) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I thought Laurent was still at Google, is that really accurate?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
|
||
The mission of OpenSSF Scorecard is to automate analysis on the security posture of open source projects. | ||
|
||
The current charter of the OpenSSF Scorecard project can be found [here](https://github.com/ossf/scorecard/blob/main/CHARTER.md). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please, don't use "here" as a link anchor. That's an anti-pattern (and a pet peeve of mine: https://lehors.wordpress.com/2009/01/29/linking-the-proper-way/ :-)
I too support the gist of this request but also expect allstar to be handled separately so, awaiting clarification on the situation on that front to approve.
Is that requirement met? Thanks. |
Allstar became a part of the Scorecard project back in May, they are no longer separate. This was included in the TAC update on May 14th for the SCP WG: https://docs.google.com/presentation/d/1l6VlRD4L4vUZ_6ogsBYTvRcfT0lZYpYE_O-0bdSksoQ/edit#slide=id.p1 Some prs: |
Co-authored-by: Zach Steindler <[email protected]> Signed-off-by: CRob <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Approve
Scorecard is now officially incubating - congrats! |
Very cool! |
cc: @ossf/tac @ossf/wg-best-practices @ossf/scorecard
xref: ossf/scorecard#4200