ossf/scorecard-webapp

View on GitHub

Website and API for OpenSSF Scorecard

Stars: 33
Forks: 33
Open beginner issues: 0
Indexed issues: 36
Avg merge: 5d 6h
Merged PRs (30d): 5

Dominant language: HTML
License: Apache-2.0
Last GitHub push: Sep 10, 2026
Latest indexed: Sep 19, 2026
Contributing guide: No contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue help wanted

Beginner friendly Everything

Open All

36 open issues indexed

Investigate JavaScript fuzzing workflow options Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

ossf/scorecard-webapp#1046 · Opened Sep 8, 2026
[BUG] Malformed branch-protection response Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/scorecard-webapp#1030 · Opened Aug 26, 2026
BUG: Overlapping content in scorecard.dev Open

Difficulty 3/5 1-2 days Newbie friendliness 63/100

ossf/scorecard-webapp#1018 · 2 comments · 1 reaction · Opened Aug 17, 2026
Rekor v2 removed the search-by-hash index; result verification depends on it Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

ossf/scorecard-webapp#999 · Opened Aug 7, 2026
400 when attempting to post with new workflow schema elements Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

ossf/scorecard-webapp#974 · Opened Jun 1, 2026
User stories list: website feedback Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

ossf/scorecard-webapp#960 · 1 comment · Opened Apr 8, 2026
Support case-insensitive scorecard lookups Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

ossf/scorecard-webapp#788 · Opened Jun 5, 2025
Firefox 138 rendering of scorecard's score shows weird characters Open

bug good first issue help wanted

Difficulty 3/5 1-2 days Newbie friendliness 48/100

ossf/scorecard-webapp#786 · 2 comments · Opened May 29, 2025
BUG REST API and website response Open

bug good first issue help wanted

Difficulty 3/5 1-2 days Newbie friendliness 35/100

ossf/scorecard-webapp#779 · 1 comment · Opened Apr 17, 2025
BUG: report not found Open

good first issue help wanted

Difficulty 3/5 1-2 days Newbie friendliness 25/100

ossf/scorecard-webapp#692 · 2 comments · Opened Jun 14, 2024
Docs: clarify wording around security risk Open

documentation good first issue help wanted

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

ossf/scorecard-webapp#639 · Opened May 27, 2024
Fetch Sigstore trust root through TUF Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

ossf/scorecard-webapp#605 · 4 comments · Opened Apr 15, 2024
"Risk level" highly misleading (Dangerous-Workflow always "CRITICAL"). Scorecard report ("webviewer") seems broken Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

ossf/scorecard-webapp#622 · 3 comments · 3 reactions · Opened Apr 2, 2024
Upload from GitLab CI fails with `repository and branch of cert doesn't match that of request` Open

Difficulty 4/5 3-5 days Newbie friendliness 32/100

ossf/scorecard-webapp#561 · 4 comments · Opened Feb 20, 2024
GitLab Projects in Subgroups Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/scorecard-webapp#511 · 6 comments · 1 reaction · Opened Dec 6, 2023
Please adopt OpenSSF Security Insights for this project Open

Difficulty 1/5 Under an hour Newbie friendliness 50/100

ossf/scorecard-webapp#478 · Opened Oct 4, 2023
Implement cache for imposter commit validation Open

api enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/scorecard-webapp#462 · Opened Aug 29, 2023
getResult REST API leads to Web Proxy errors when repositories look like file names Open

Difficulty 1/5 Under an hour Newbie friendliness 45/100

ossf/scorecard-webapp#432 · Opened Jul 2, 2023
Viewer should sort checks alphabetically within threat categories Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

ossf/scorecard-webapp#430 · 1 comment · Opened Jun 26, 2023
[Scorecard Viewer] Feature: show grayed out the checks whose results aren't available Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

ossf/scorecard-webapp#427 · 3 comments · Opened Jun 22, 2023
[Proposal] Standardize Name for Scorecard Checks in OpenAPI Spec Open

api enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

ossf/scorecard-webapp#380 · Opened Apr 25, 2023
Drop BigQuery and just provide a data dump or paginate API Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/scorecard-webapp#375 · 1 comment · Opened Apr 14, 2023
Complement certain checks via cron Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

ossf/scorecard-webapp#280 · Opened Dec 10, 2022
Deployment instructions Open

documentation good first issue help wanted

ossf/scorecard-webapp#238 · 1 comment · 1 assignee · Opened Oct 23, 2022
Failure of OSS-fuzz Open

fuzzing

Difficulty 4/5 3-5 days Newbie friendliness 25/100

ossf/scorecard-webapp#220 · Opened Oct 1, 2022
Include docs for API in the website Open

documentation enhancement good first issue help wanted

ossf/scorecard-webapp#209 · 4 comments · 1 assignee · Opened Sep 18, 2022
Extending the Scorecard API for historical data Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/scorecard-webapp#376 · 1 comment · 1 reaction · Opened Sep 17, 2022
Feature - Human readable report to link to from scorecards badge Open

enhancement good first issue

ossf/scorecard-webapp#206 · 15 comments · 7 reactions · 1 assignee · Opened Sep 9, 2022
Feature: Expose Rekor entry ID through API Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/scorecard-webapp#183 · 1 comment · Opened Aug 22, 2022
Do not simply take latest UUID from Rekor Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/scorecard-webapp#135 · 1 comment · Opened Jul 6, 2022
BUG: fix linter errors Open

good first issue help wanted

Difficulty 4/5 3-5 days Newbie friendliness 25/100

ossf/scorecard-webapp#104 · 4 comments · Opened Jun 2, 2022
Limit the triggers we accept Open

Difficulty 3/5 1-2 days Newbie friendliness 28/100

ossf/scorecard-webapp#81 · 2 comments · Opened Apr 22, 2022
Goat counter issue on staging branch Open

ossf/scorecard-webapp#75 · 4 comments · 1 assignee · Opened Apr 13, 2022
Install privacy-preserving analytics Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

ossf/scorecard-webapp#42 · Opened Mar 11, 2022
Pin deps for installation Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

ossf/scorecard-webapp#24 · Opened Feb 17, 2022
XSS protection when displaying repo data Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

ossf/scorecard-webapp#14 · Opened Jan 21, 2022

ossf/scorecard-webapp

Get new issues in your inbox