OpenSSF Scorecard

アプリケーションセキュリティテスト（SAST/DAST）

認証を受けてプロフィールを更新する 認証済みのプロフィールは検索結果の上位に表示されます。今すぐ認証しましょう。数分で完了します。 訪問 報告

This open-source security assessment tool evaluates the safety and risk level of software repositories by analyzing code quality, identifying vulnerabilities, and detecting insecure practices, thereby helping developers and security teams maintain secure development workflows. It features automated scanning through GitHub Actions, manual command-line checks, customizable configurations, and integration capabilities for continuous security monitoring, addressing issues like outdated vulnerabilities and insecure coding habits. Its primary users are software developers, security professionals, open-source contributors, and organizations seeking to improve security hygiene and ensure best practices in their software supply chain.

OpenSSF Scorecardは次の場所にあります Application Security Testing (SAST/DAST) カテゴリー。

OpenSSF Scorecard に最も類似した製品は次のとおりです。

SypraSAM 認証済みプロフィール 昇進 → Spectra Assure → XploitScan 認証済みプロフィール → Whitespots → SafeDep →

スクリーンショット

詳細

OpenSSF Scorecard 主な特徴

• Manual Checks
  You can run Scorecard yourself on any project using the command line to check specific security tests.
• Multiple Checks
  It performs 18 different security checks in three areas: overall security, source code safety, and build process risks.
• Part of OpenSSF
  Scorecard is developed by the Open Source Security Foundation to improve security in open source projects.
• Risk Evaluation
  Each check shows a score out of 10 and a risk level to show how risky a vulnerability is.
• Easy Installation
  It takes less than 10 minutes to install Scorecard on your project, either with GitHub or on your computer.
• Assess Dependencies
  Scorecard helps you evaluate the safety of third-party code and dependencies used in projects.
• Remediation Prompts
  Scorecard provides advice on how to fix problems and improve your security practices.
• Community Involvement
  You can join the Scorecard community and help improve its checks and features.
• Supports Multiple Users
  Maintainers, organizations, and project consumers can all use Scorecard to make better decisions about security.
• Automatic Security Checks
  Scorecard can run automatically on your code using GitHub Actions to find security problems when code is changed.
• Guide for Better Practices
  It checks if projects follow security rules like code review, using secure build processes, and having security policies.
• Security Posture Assessment
  Scorecard gives a score to show how secure a project is and helps you find ways to make it safer.

バッジ

<a href="https://saasbrowser.com/ja/saas/1430582/openssf-scorecard" target="_blank" rel="noopener"><img src="https://files.saasbrowser.com/mo6svdyr5tnc1htix8btavfk4myr" alt="OpenSSF Scorecard - SaaS Browser Verified Badge" width="200" height="133" /></a>

バッジをコピー

<a href="https://saasbrowser.com/ja/saas/1430582/openssf-scorecard" target="_blank" rel="noopener"><img src="https://files.saasbrowser.com/lyrm8q9pivmenwccjaklyk27xa7j" alt="OpenSSF Scorecard - SaaS Browser Verified Badge" width="200" height="133" /></a>

バッジをコピー

OpenSSF Scorecard 代替案

SypraSAM

認証済みプロフィール

昇進

This unified platform offers comprehensive Software Asset Management, Cloud F...

Spectra Assure

This platform provides comprehensive tools for securing software development ...

XploitScan

認証済みプロフィール

This security analysis tool performs automated vulnerability detection on AI-...

Whitespots

This platform provides comprehensive, automated vulnerability scanning and se...

SafeDep

This security solution continuously inspects open-source dependencies for mal...

使用される技術

すべてのテクノロジーを見る