---

Screenshots

---

Details

---

---

OpenSSF Scorecard Main Features

• Manual Checks
  You can run Scorecard yourself on any project using the command line to check specific security tests.
• Multiple Checks
  It performs 18 different security checks in three areas: overall security, source code safety, and build process risks.
• Part of OpenSSF
  Scorecard is developed by the Open Source Security Foundation to improve security in open source projects.
• Risk Evaluation
  Each check shows a score out of 10 and a risk level to show how risky a vulnerability is.
• Easy Installation
  It takes less than 10 minutes to install Scorecard on your project, either with GitHub or on your computer.
• Assess Dependencies
  Scorecard helps you evaluate the safety of third-party code and dependencies used in projects.
• Remediation Prompts
  Scorecard provides advice on how to fix problems and improve your security practices.
• Community Involvement
  You can join the Scorecard community and help improve its checks and features.
• Supports Multiple Users
  Maintainers, organizations, and project consumers can all use Scorecard to make better decisions about security.
• Automatic Security Checks
  Scorecard can run automatically on your code using GitHub Actions to find security problems when code is changed.
• Guide for Better Practices
  It checks if projects follow security rules like code review, using secure build processes, and having security policies.
• Security Posture Assessment
  Scorecard gives a score to show how secure a project is and helps you find ways to make it safer.

---

Verified Badge

---

OpenSSF Scorecard Alternatives

---

Technologies Used

View All Technologies