Skip to content

feat: add OpenSSF Scorecard workflow#9

Merged
mohit-nagaraj merged 1 commit intomainfrom
feat/openssf-scorecard
Mar 24, 2026
Merged

feat: add OpenSSF Scorecard workflow#9
mohit-nagaraj merged 1 commit intomainfrom
feat/openssf-scorecard

Conversation

@mohit-nagaraj
Copy link
Copy Markdown
Member

Summary

  • Adds scorecard.yml GitHub Actions workflow using ossf/scorecard-action@v2.4.1
  • Runs weekly (Monday 6AM UTC), on push to main, and via manual dispatch
  • Publishes SARIF results to GitHub Security tab
  • Helps track and improve security posture across the org

Related Issue

Closes #3

Test plan

  • Workflow YAML is valid
  • Scorecard runs on next push to main or manual trigger
  • Results appear in Security tab

Runs OpenSSF Security Scorecard weekly and on pushes to main.
Publishes results to GitHub Security tab via SARIF upload.

Closes #3

Signed-off-by: Mohit Nagaraj <mohitnagaraj20@gmail.com>
@mohit-nagaraj mohit-nagaraj added the must-fix-for-cncf Required for CNCF Sandbox submission label Mar 24, 2026
@mohit-nagaraj mohit-nagaraj added the must-fix-for-cncf Required for CNCF Sandbox submission label Mar 24, 2026
@mohit-nagaraj mohit-nagaraj merged commit 45e9f23 into main Mar 24, 2026
1 check passed
@gemini-code-assist
Copy link
Copy Markdown

Note

Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.

@mohit-nagaraj mohit-nagaraj deleted the feat/openssf-scorecard branch March 24, 2026 06:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

must-fix-for-cncf Required for CNCF Sandbox submission

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Set up OpenSSF Security Scorecard on all repos

1 participant