Skip to content

ci(dir): add OpenSSF Scorecard workflow - #2096

Merged
muscariello merged 1 commit into
mainfrom
ci/add-ossf-scorecard-workflow
Sep 2, 2026
Merged

ci(dir): add OpenSSF Scorecard workflow#2096
muscariello merged 1 commit into
mainfrom
ci/add-ossf-scorecard-workflow

Conversation

@muscariello

Copy link
Copy Markdown
Member

Adds an OpenSSF Scorecard workflow so the project gets a published security score.

  • Runs weekly, on push to main, on branch protection changes, and via manual dispatch
  • Publishes results to securityscorecards.dev (enables badge)
  • Uploads SARIF results to GitHub code scanning

Validation: actionlint .github/workflows/scorecard.yml passes with no errors.

@muscariello
muscariello requested a review from a team as a code owner September 2, 2026 19:17
@github-actions github-actions Bot added the size/S Denotes a PR that changes 50-199 lines label Sep 2, 2026
@codecov

codecov Bot commented Sep 2, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Signed-off-by: Luca Muscariello <muscariello@ieee.org>
@muscariello
muscariello force-pushed the ci/add-ossf-scorecard-workflow branch from dcde479 to 708c242 Compare September 2, 2026 20:02
@muscariello muscariello changed the title ci: add OpenSSF Scorecard workflow ci(dir): add OpenSSF Scorecard workflow Sep 2, 2026
@muscariello
muscariello requested a review from tkircsi September 2, 2026 20:12
@muscariello
muscariello merged commit c69c8d2 into main Sep 2, 2026
34 of 35 checks passed
@muscariello
muscariello deleted the ci/add-ossf-scorecard-workflow branch September 2, 2026 20:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/S Denotes a PR that changes 50-199 lines

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants