add scorecard pipeline

[AugustinMauroy]

No description provided.

[lucacasonato]

Can you elaborate on why this is useful? Do other repos do this?

[AugustinMauroy]

Hey !
it's create a score base on some criteria. It's allow user (those who use or those who have their instance) to have a security overview.

openssf scorecard
openssf

Do other repos do this?

nodejs/node
nodejs/security-wg
nodejs/nodejs.org
prominent scorecard users

There are others but I don't know them. You have to bear in mind that the tools are new, so you need to give them time to be adopted.

[AugustinMauroy]

@lucacasonato any news ??