Using Kubernetes jobs to scale OpenSSF Scorecard
· 9 min read
We recently released integrations with the OpenSSF Scorecard on the OpenSauced platform. The OpenSSF Scorecard is a powerful Go command line interface that anyone can use to begin understanding the security of their projects and dependencies. It runs several checks for dangerous workflows, CICD best practices, if the project is still maintained, and much more. This enables software builders and consumers to understand their security posture, deduce if a project is safe to use, and where improvements to security practices need to be made.