OpenSSF Scorecard - Security health metrics for Open Source
Role in this project:
Back-end & DevOps Engineer Contributions:10 releases, 1459 reviews, 41 commits in 6 months
Contributions summary:Spencer implemented enhancements to the project's build process and infrastructure by adding functionality to use crane to add hash suggestions to unpinned Docker images. This involved modifying the build script to support Docker image pinning, incorporating checks for image digests, and reformatting code to align with linting standards. The user also integrated remediation code, including switching to strings.Builder for more maintainable logic, and added remediation info to the scorecard output.
openssfsecurityscorecardopenssf-scorecard
Official GitHub Action for OSSF Scorecards.
Contributions:72 pushes, 90 branches, 14 tags in 3 years 4 months
scorecardsossf