Skip to main content

and here I get into a discussion about why we don't show off the "OpenSSF scorecard" in #curl

(tldr: it's wrong)

https://github.com/curl/curl/discussions/12609


Scorecard integration from Open Source Security Foundation · curl curl · Discussion #12609

Hi, Me and a group of friends want to participate in the "Secure Open Source Rewards (SOS)" program from the Open Source Security Foundation. All of us are newbies in the open source comunity contr...
GitHub
#curl
in reply to daniel:// stenberg://

Marek
Marek
• •
And the whole thing is only for GitHub repos. Free alternatives such as Codeberg are not supported😭😨
in reply to Marek

daniel:// stenberg://
daniel:// stenberg://
• •
@mark22k presumably it would just be to extend the script. But doing this with a script is severely limited to begin with so I'm not holding my breath for this to become a good system
@Marek
in reply to daniel:// stenberg://

Marek
Marek
• •
But I think you should also bear in mind that Gitea and GitHub use different APIs - that would have to be quite a big extension.
in reply to Marek

daniel:// stenberg://
daniel:// stenberg://
• •
@mark22k I don't know this but in the grand scheme of things, surely a few API differences is not a deal-breaker if someone *really* wanted to do this
@Marek
in reply to daniel:// stenberg://

Urix Turing
Urix Turing
• •
I'm not sure if people whose motivation is to collect rewards are hurting more than helping OSS
in reply to daniel:// stenberg://

David Lord :python:
David Lord :python:
• •
This is the same reason I don't show it for Flask. The general idea behind it, "be aware of these issues and processes", is good, but the execution of it is not.
⇧