cyberstars / tools / scorecard
OpenSSF Scorecard
—Automated security health scoring for open-source projects.
OpenSSF tool that runs a suite of checks on a repository (branch protection, signed releases, dependency update tooling, dangerous workflows and more) and combines them into a 0-10 security health score. Runs as a CLI, a GitHub Action or via a public REST API.