Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

scorecard: update to version 5 #1830

Open
planetf1 opened this issue Jul 1, 2024 · 2 comments · May be fixed by #1890
Open

scorecard: update to version 5 #1830

planetf1 opened this issue Jul 1, 2024 · 2 comments · May be fixed by #1890

Comments

@planetf1
Copy link
Contributor

planetf1 commented Jul 1, 2024

The openSSF scorecard execution is currently running with version 4 of scorecard

Once v5 goes GA, we should update to v5 (currently at v5.0.0-rc2)

See https://github.com/ossf/scorecard/releases
planetf1 added a commit to planetf1/liboqs that referenced this issue Aug 13, 2024
@planetf1
open-quantum-safe#1830 update scorecard to v5 (gh action 2.4.0)
3ac6112 
Signed-off-by: Nigel Jones <[email protected]>
@planetf1
Copy link
Contributor Author

Initial update done. will review results from PR.

One of the changes in v5 is the ability to get more structure in the results, and have more control around what information is shared -- for example adding an annotation explaining why something is the way it is.

See v5 release notes

@planetf1 planetf1 linked a pull request Aug 13, 2024 that will close this issue
Open
2 tasks
planetf1 added a commit to planetf1/liboqs that referenced this issue Aug 27, 2024
@planetf1
open-quantum-safe#1830 update scorecard to v5 (gh action 2.4.0)
03903a4 
Signed-off-by: Nigel Jones <[email protected]>
@planetf1
Copy link
Contributor Author

PR is ready for review

planetf1 added a commit to planetf1/liboqs that referenced this issue Sep 25, 2024
@planetf1
open-quantum-safe#1830 update scorecard to v5 (gh action 2.4.0)
fcb99cc 
Signed-off-by: Nigel Jones <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
liboqs planning
Status: Todo
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

#1830 update scorecard to v5 (gh action 2.4.0) planetf1/liboqs
1 participant
@planetf1