hyperledger / hyperledger/fabric-private-chaincode
Improve OpenSSF Scorecard report
Open
help wanted
- Dominant language
- Go
- Stars
- 174
- Forks
- 98
- Avg merge
- 2d 21h
- Merged PRs (30d)
- 1
Description
Currently, the FPC repo has a scorecard of 4.3 (see https://scorecard.dev/viewer/?uri=github.com/hyperledger/fabric-private-chaincode)
This issue is about improving our scorecard value by applying best practices as suggested by [OpenSSF](https://github.com/ossf/scorecard)
TODOS:
- [x] Dangerous-Workflows
- [x] Token-Permissions #764
- [ ] Vulnerabilities #759
- [x] Maintained
- [ ] Code-Review
- [ ] Binary-Artifacts
- [ ] Fuzzing (TBD)
- [ ] SAST
- [ ] Pinned-Dependencies
- [x] Security-Policy
- [ ] CII-Best-Practices
- [x] License
- [ ] Branch-Protection
- [ ] Packaging
- [ ] Signed-Releases
Contributor guide
Assessment
This issue has not been assessed yet.