ossf/scorecard
1
1
Fork 0
mirror of https://github.com/ossf/scorecard.git synced 2024-11-04 03:52:31 +03:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Merge pull request #38 from dlorenc/meeting

Browse Source 
Add Best Practices WG meeting invite.
This commit is contained in:
Kim Lewandowski 2020-10-27 12:36:37 -07:00 committed by GitHub
commit 1efa592aaf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
README.md
View File

@ -97,6 +97,15 @@ If you'd like to add a check, make sure it is something that meets the following
and then create a new GitHub Issue.
## Contributing
If you want to get involved or have ideas you'd like to chat about, we discuss this project in the [OSSF Best Practices Working Group](https://github.com/ossf/wg-best-practices-os-developers) meetings.
See the [Community Calendar](https://calendar.google.com/calendar?cid=czYzdm9lZmhwNWk5cGZsdGI1cTY3bmdwZXNAZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbQ) for the schedule and meeting invitations.
See the [Contributing](CONTRIBUTING.md) documentation for guidance on how to contribute.
## Results
Each check returns a Pass/Fail decision, as well as a confidence score between 0 and 10.
@ -113,7 +122,3 @@ Many of the checks are based on heuristics, contributions are welcome to improve
* Maintainers must be provided with a mechanism to correct any automated scorecard findings they feel were made in error, provide "hints" for anything we can't detect automatically, and even dispute the applicability of a given scorecard finding for that repository.
* Any criteria in the scorecard must be actionable. It should be possible, with help, for any project to "check all the boxes".
* Any solution to compile a scorecard should be usable by the greater open source community to monitor upstream security.
## Contributing
See the [Contributing](CONTRIBUTING.md) documentation for guidance on how to contribute.