aboutcode-org / aboutcode-org/scancode.io
Enrich an SBOM using OSSF Security Score Card
Open
- Dominant language
- Python
- Stars
- 215
- Forks
- 203
- Avg merge
- 4d 8h
- Merged PRs (30d)
- 6
Description
From @pombredanne
We already have SBOM export (and import) options in scancode.io supporting SPDX and CycloneDX
SBOMs, and we can enrich this data using the public https://github.com/ossf/scorecard#public-data
or the RestAPI at: https://api.securityscorecards.dev/.
- [x] #1282
- [x] #1283
- [ ] #1284
- [ ] #1285
Contributor guide
Assessment
This issue has not been assessed yet.