SCI: Assess the State of CNCF Project Artifacts
Open
tag/security-and-compliance
- Dominant language
- HTML
- Stars
- 1.9k
- Forks
- 724
- Avg merge
- 6d 12h
- Merged PRs (30d)
- 4
Description
- [x] Identify and document the initial set of 10-15 target CNCF projects for the pilot scan.
- [ ] Execute the discovery tool against the pilot project list and analyze the initial findings.
- [ ] Expand the scan to a larger set of CNCF projects (e.g., all incubating and graduated).
- [ ] Draft the "State of the Ecosystem" report, summarizing the prevalence, formats (SPDX/CycloneDX), and findability of SBOMs.
Contributor guide
Assessment
This issue has not been assessed yet.