Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts
☆50Jul 25, 2026Updated 3 months ago
Alternatives and similar repositories for scorecard-monitor
Users that are interested in scorecard-monitor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Tool for visualizing the Open SSF Scorecard Api data in a human friendly way☆21Updated this week
- Website and API for OpenSSF Scorecard☆34Nov 3, 2026Updated last week
- A CLI tool for creating secure by design/default source repos.☆28Jul 29, 2024Updated 2 years ago
- Machine-readable specification for the attestation of security-relevant data.☆84Updated this week
- Scan for workflow runs that are impacted by trivy action compromise☆21Mar 20, 2026Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆171Updated this week
- Orchestrate GitHub Actions Security☆336Nov 5, 2026Updated last week
- Manage collection of SBOMs (Software Bill of Materials)☆14Mar 25, 2024Updated 2 years ago
- CLOMonitor is a tool that periodically checks open source projects repositories to verify they meet certain project health best practices☆151Updated this week
- The SCANOSS python package providing a simple, easy to consume library for interacting with SCANOSS APIs/Engine.☆43Oct 23, 2026Updated 2 weeks ago
- Go implementation of the package url spec☆76Aug 24, 2026Updated 2 months ago
- ☆25Nov 3, 2026Updated last week
- Purpose-built security agent for hosted runners☆50Nov 3, 2026Updated last week
- OpenSSF Endusers Working Group☆28Mar 21, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- SBOM Search - Context aware search in SBOM repositories☆33Oct 5, 2026Updated last month
- A tool for measuring InnerSource collaboration in a repository☆20Updated this week
- The model for the information captured in SPDX version 3 standard.☆108Updated this week
- Official GitHub Action for OpenSSF Scorecard.☆428Updated this week
- Collection of tools for producing and exploring OmniBOR data.☆22Oct 31, 2024Updated 2 years ago
- Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.☆95Updated this week
- Golang implementation of a checker for determining if an SPDX ID satisfies an SPDX Expression.☆55Updated this week
- AI-powered security scanner for Claude Code plugins and skills - LLM analysis, static rules, taint tracking, CI/PR integration, and inte…☆15Mar 1, 2026Updated 8 months ago
- OpenJS's Collaboration Space for JavaScript Bundlers and Tooling Infrastructure.☆15Oct 29, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- OSS License Open Data☆12Jun 28, 2019Updated 7 years ago
- Privateer is a plugin-based framework for security & compliance evaluations.☆32Updated this week
- Visual SBOM editor for SPDX☆11Jun 25, 2026Updated 4 months ago
- ☆12Sep 9, 2026Updated 2 months ago
- The BEAR (Belonging, Empowerment, Allyship, and Representation) WG, formerly DEI, was formed in December 2023 to enhance representation a…☆14May 18, 2026Updated 5 months ago
- ☆11Apr 10, 2025Updated last year
- OSS License Simple Viewer is a simple Excel-based tool as OSS license reference for engineers.☆14Nov 20, 2020Updated 5 years ago
- Ascii visualizations☆20Jan 1, 2021Updated 5 years ago
- Vulnerability Management with SBOM☆19Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A repository containing example Minder rules and profiles☆25Updated this week
- A zoo for malicious NPM packages☆20Dec 8, 2022Updated 3 years ago
- The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…☆245May 26, 2025Updated last year
- This Guidance helps organizations provide their data scientists with external package repository access while maintaining information sec…☆23Oct 20, 2024Updated 2 years ago
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,571Updated this week
- Study of research software in repositories. Contact: @karacolada☆13Aug 14, 2024Updated 2 years ago
- A GitHub Action to suggest removal of non-organization members from CODEOWNERS files☆140Updated this week
Are these results useful?