Scorecard task can theoretically hang indefinitely

> [!NOTE]
> Migrated from [augurlabs/augur#3671](https://github.com/augurlabs/augur/issues/3671)
> Originally opened by `@MoralCode` on 2026-02-10

---

> A likely bigger problem in my opinion is that `process_ossf_dependency_metrics` can hang indefinitely. The scorecard subprocess call in https://github.com/chaoss/augur/blob/main/augur/tasks/util/worker_util.py#L132 uses `timeout=None`. The scorecard binary makes its own network calls to GitHub. If it hangs (network issues, rate limits, whatever), the Celery
> worker hangs forever.

_Originally posted by @shlokgilda in [#200](https://github.com/chaoss/augur/issues/3668#issuecomment-3874323380)_