Search results

Checking for pyup should be removed

Status: Open.

#4751 In ossf/scorecard;

· stexandev opened on Aug 8, 2025

Should subprocess.check_call(list) be safe in the check of Dangerous-workflow?

Status: Open.

#4748 In ossf/scorecard;

· Fix3dP0int opened on Aug 7, 2025

BUG: openssf.scorecardcron.scorecard-v2 not updated since 2025-07-07

kind/bugSomething isn't workingSomething isn't working

Status: Open.

#4745 In ossf/scorecard;

· orens opened on Aug 6, 2025

Unsure how to satisfy signed release criteria

Status: Open.

#4738 In ossf/scorecard;

· seanlandsman opened on Aug 1, 2025

Scorecards False Positives for Token Permissions & Pinned Dependencies in Repos Using Shared GitHub Actions

kind/enhancementNew feature or requestNew feature or request

Status: Open.

#4735 In ossf/scorecard;

· Ndacyayisenga-droid opened on Jul 31, 2025

BUG: Pinned-Dependency for downloadThenRun finding when GitHub Raw Commit Hash Used

kind/bugSomething isn't workingSomething isn't working

Status: Open.

#4733 In ossf/scorecard;

· scottschreckengaust opened on Jul 30, 2025

BUG: Code-Review check inaccurate for at least one project

kind/bugSomething isn't workingSomething isn't working

Status: Open.

#4730 In ossf/scorecard;

· crlorentzen opened on Jul 29, 2025

Dependency-Update-Tool ignores enabled Dependabot without dependabot.yml

kind/bugSomething isn't workingSomething isn't working

Status: Open.

#4729 In ossf/scorecard;

· jfrantzius opened on Jul 29, 2025

Recursive GH workflow traversal

kind/enhancementNew feature or requestNew feature or request

Status: Open.

#4716 In ossf/scorecard;

· scop opened on Jul 23, 2025

Codespaces instructions in CONTRIBUTING.md

Status: Open.

#4715 In ossf/scorecard;

· devon3583 opened on Jul 22, 2025

Signed Releases documentation unhelpful

Status: Open.

#4713 In ossf/scorecard;

· jmgate opened on Jul 22, 2025

BUG Vulnerabilities are not being detected accurately in repos using the bun.js runtime

check/Vulnerabilities

kind/bugSomething isn't workingSomething isn't working

Status: Open.

#4695 In ossf/scorecard;

· dsm23 opened on Jul 7, 2025