4 ms·
Check out some of the initiatives across the board: https://github.com/ossf https://github.com/ossf (Lots of WG and efforts such as package analysis, scorecard
by thenerdhead 4y ago
Check out some of the initiatives across the board:
https://github.com/ossf https://github.com/ossf (Lots of WG and efforts such as package analysis, scorecards, etc)
https://deps.dev/ https://deps.dev/ (Implements OSSF scorecard)
- jacques_chester 4y agoIn particular, check out the Securing Software Repos WG: https://github.com/ossf/wg-securing-software-repos https://github.com/ossf/wg-securing-software-repos So far folks have turned up from RubyGems, PyPI, NPM, Maven Central, Gradle, Drupal and I'm probably forgotten someone.