Investigate and improve OpenSSF scorecard result
Open
enhancement
help wanted
project governance
project infrastructure
- Dominant language
- TypeScript
- Stars
- 270
- Forks
- 193
- Avg merge
- 2d 13h
- Merged PRs (30d)
- 36
Description
## Enhancement Request
See: https://scorecard.dev/viewer/?uri=github.com/finos/FDC3
Our OpenSSF Scorecard result is lower than it should be, perhaps due to a number of unknown results (Branch protection, Packaging and Signed releases - all of which we should pass). There are a number of other results that can and should be improve (SAST, Pinned dependencies, Token permissions).
Improving our scorecard result will demonstrate greater maturity in the project's governance.
Contributor guide
Assessment
This issue has not been assessed yet.