OpenSSF Scorecard quickly assesses open source projects for security risks through a series of automated checks. Part of @OpenSSF
Joined October 2022
- Tweets23
- Following6
- Followers131
- Likes13
OpenSSF Scorecard retweeted
Improving Supply Chain Security: IBM as a user and a contributor to Open Source Security Foundation Scorecard by @tjamieibm hubs.la/Q01HzLpm0 @IBM @Scorecards_dev #OpenSource #OSSsecurity
OpenSSF Scorecard retweeted
Attention Scorecard Project users! @Scorecards_dev needs your input to determine which work to prioritize in the coming months. Please take a few minutes to fill out our survey at: hubs.la/Q01DRF4y0 Your responses will help us make informed decisions that benefit everyone
OpenSSF Scorecard retweeted
Planning on attending @RSAConference #RSAC in April? Don't miss - How Do You Trust Open Source Software? by @snaveen and Brian Russell on @Scorecards_dev & Introducing the Secure Supply Chain Consumption Framework (S2C2F) by Adrian Diglio rsaconference.com/
OpenSSF Scorecard retweeted
Developers rely on open source tools to integrate critical security controls as part of the CI/CD pipeline. Continued efforts to provide resources, such as @Scorecards_dev with its promise of automated scoring...will support teams as they assemble software darkreading.com/vulnerabilit…
"How Do You Trust Open Source Software?" - @snaveen (@EndorLabs) and Brian Russell @Google
youtu.be/0b9avFup0LY
OpenSSF Scorecard retweeted
This week, we had a great discussion about @Scorecards_dev in the @nodejs Security WG. 😎
I published a little post about it in my blog. #security #OpenSSFScorecards
blog.ulisesgascon.com/openss…
OpenSSF Scorecard retweeted
Poor software quality may have cost the US at least $2.41 trillion this year hubs.la/Q01vMFHb0 Companies are encouraged to adopt complementary security tools alongside #SBOMs to reassure developers of their components' security profile, such as @Scorecards_dev & other tools
OpenSSF Scorecard retweeted
The @EclipseFdn ran @Scorecards_dev against all their projects, analyzed the results, and created a prioritized list of activities that they’ll focus on to achieve the best and broadest impact github.com/ossf/alpha-omega/…
OpenSSF Scorecard retweeted
JReleaser has reached another milestone: the project is now 100% compliant with the @theopenssf Best Practices 🎉 bestpractices.coreinfrastruc…
In addition we also have configured the @Scorecards_dev GitHub action.
OpenSSF Scorecard retweeted
@theopenssf scorecard is coming soon to NodeSecure CLI 😍(PR opened today). Really happy about this new feature ☺️
OpenSSF Scorecard retweeted
Meet @snaveen, Software Engineer, @EndorLabs #contributor and #maintainer across a few OpenSSF projects including @Scorecards_dev openssf.org/blog/2022/11/09/… "A welcoming community is essential." #OSS
OpenSSF Scorecard retweeted
Our Support, Advocacy, Contribution & Implementation team (SACI FA, part of GOSST) continue to add security tools like @theopenssf Scorecards to critical OSS Projects:
github.com/facebook/zstd/iss…
github.com/systemd/systemd/i…
github.com/pandas-dev/pandas…
OpenSSF Scorecard retweeted
Projects adopting the practices set out by OpenSSF in its Security Score will improve their project’s security & the security of the open source projects that depend on them hubs.la/Q01qhR0_0 @sonatype State of the Software Supply Chain Report @stephenmagill @Scorecards_dev
Scorecard v4.8.0 release.
github.com/ossf/scorecard/re…
OpenSSF Scorecard retweeted
.@CloudNativeFdn project maintainers aim to raise their projects' security score (measured by OpenSSF Security Scorecard) ahead of #KubeCon + #CloudNativeCon NA at #SecuritySlam to increase security awareness, posture & compliance community.cncf.io/cloud-nati… @sonatype @Scorecards_dev
The eclipse foundation is on a mission to improve the Software Supply Chain using Scorecard. Check out this blog post to see how they're making progress! mikael.barbero.tech/blog/pos…