ngmi / ossf / scorecard-action

ossf/scorecard-action

Go 360 stars

Official GitHub Action for OpenSSF Scorecard.

✓ Synced 4h ago Share on X →
README badge: [![ngmi](https://ngmi.review/badge/ossf/scorecard-action.svg)](https://ngmi.review/repo/ossf/scorecard-action)
595 Merged PRs
3 days Avg Merge Time
0m Fastest PR
2 months Slowest PR
#290 Global Speed Rank

Top Reviewers

#1
@naveensrinivasan
258 reviews ✓ 233 approved ↺ 1 blocked
#2 @spencerschrock
@spencerschrock
212 reviews ✓ 195 approved
#3
@laurentsimon
151 reviews ✓ 65 approved
#4 @azeemshaikh38
@azeemshaikh38
112 reviews ✓ 73 approved ↺ 3 blocked
#5
@justaugustus
71 reviews ✓ 44 approved ↺ 10 blocked
#6
@rohankh532
33 reviews
#7 @olivekl
@olivekl
24 reviews ✓ 4 approved
#8
@raghavkaul
16 reviews ✓ 14 approved
#9 @asraa
@asraa
11 reviews ✓ 5 approved
#10
@pnacht
9 reviews

Recent Merged PRs

# Title Author Time Reviews Blocks
#1603 bump scorecard to v5.4.0 @spencerschrock 1 day 1 ✓
#1602 :seedling: Bump the github-actions group across 1 directory with 4 updates @dependabot 4m 1 ✓
#1600 :seedling: Bump golang from 1.25.3 to 1.25.4 in the docker-images group @dependabot 1 day 1 ✓
#1601 :seedling: Bump golang.org/x/net from 0.46.0 to 0.47.0 @dependabot 20.1h 1 ✓
#1595 :seedling: Bump golang from 1.25.2 to 1.25.3 in the docker-images group @dependabot 14 days 1 ✓
#1597 :seedling: Bump the github-actions group across 1 directory with 2 updates @dependabot 7 days 1 ✓
#1593 :seedling: Bump the github-actions group with 2 updates @dependabot 6 days 1 ✓
#1590 :seedling: Bump github/codeql-action from 3.30.5 to 3.30.6 in the github-actions group @dependabot 4 days 2 ✓
#1589 :seedling: Bump the docker-images group with 2 updates @dependabot 4 days 1 ✓
#1592 :seedling: Bump golang.org/x/net from 0.44.0 to 0.46.0 @dependabot 2 days 1 ✓
#1588 :seedling: Bump github.com/sigstore/cosign/v2 from 2.6.0 to 2.6.1 @dependabot 8 days 1 ✓
#1587 :seedling: bump docker to ghcr v2.4.3 @spencerschrock 3.4h 2 ✓
#1585 :seedling: Bump the github-actions group with 3 updates @dependabot 17.3h 1 ✓
#1579 :seedling: Bump github.com/sigstore/cosign/v2 from 2.5.2 to 2.6.0 @dependabot 17 days 1 ✓
#1586 :seedling: Bump github.com/ossf/scorecard/v5 from v5.2.1 to v5.3.0 @spencerschrock 17m 1 ✓
#1583 :book: Fix recommended command to test the image in development @deivid-rodriguez 4 days 3 ✓
#1568 :seedling: Bump the docker-images group across 1 directory with 2 updates @dependabot 1 month 1 ✓
#1575 :seedling: Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 @dependabot 22 days 1 ✓
#1580 :seedling: Bump the github-actions group with 2 updates @dependabot 9 days 1 ✓
#1584 :seedling: Improve printing options @deivid-rodriguez 8.7h 1 ✓