open-telemetry / open-telemetry/opentelemetry-java

Tracking OSSF Scorecard improvements

Open
#7,068 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Java
Stars
2.5k
Forks
1k
Avg merge
3d 17h
Merged PRs (30d)
58

Description

Tracking OSSF Scorecard improvements: https://securityscorecards.dev/viewer/?uri=github.com/open-telemetry/opentelemetry-java

and CLOMonitor improvements: https://clomonitor.io/projects/cncf/open-telemetry#opentelemetry-java

Initial scores:

  • OSSF Scorecard: 7.1
  • CLOMonitor: 74

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the OSSF Scorecard and CLOMonitor links in the issue and compare their current findings with the recorded initial scores. The issue does not identify files, tests, or specific improvements; completion would require addressing the relevant findings and confirming improved scores.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.