ossf/project-security-metrics issues and pull requests

#96 - Charter addition

Pull Request - State: open - Opened by hythloda 8 months ago - 1 comment

#95 - Proposed legal & governance improvements for the OpenSSF

Issue - State: open - Opened by hythloda 9 months ago - 2 comments

#94 - Bump urllib3 from 1.26.7 to 1.26.18 in /src

Pull Request - State: open - Opened by dependabot[bot] about 1 year ago
Labels: dependencies

#93 - Please adopt OpenSSF Security Insights for this project

Issue - State: open - Opened by caabernathy about 1 year ago

#92 - Bump urllib3 from 1.26.7 to 1.26.17 in /src

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 1 comment
Labels: dependencies

#91 - Bump certifi from 2022.12.7 to 2023.7.22 in /src

Pull Request - State: open - Opened by dependabot[bot] over 1 year ago
Labels: dependencies

#90 - Bump aiohttp from 3.8.1 to 3.8.5 in /src

Pull Request - State: open - Opened by dependabot[bot] over 1 year ago
Labels: dependencies

#89 - Bump django from 4.0.1 to 4.1.10 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies

#88 - Bump requests from 2.27.1 to 2.31.0 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies

#87 - Bump django from 4.0.1 to 4.1.9 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies

#86 - Bump sqlparse from 0.4.2 to 0.4.4 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies

#85 - Bump redis from 4.1.0 to 4.4.4 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies

#84 - Bump redis from 4.1.0 to 4.5.3 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies

#83 - Bump django from 4.0.1 to 4.1.7 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies

#82 - Bump django from 4.0.1 to 4.0.9 in /src

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies

#81 - Bump certifi from 2021.10.8 to 2022.12.7 in /src

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#80 - Bump django from 4.0.1 to 4.0.7 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#79 - bug: information dropdown does nothing

Issue - State: closed - Opened by cpendery over 2 years ago

#78 - bug: website is super slow to load

Issue - State: closed - Opened by cpendery over 2 years ago

#77 - ci: use standard black and add to ci

Pull Request - State: closed - Opened by cpendery over 2 years ago

#76 - bug: remove `Select Project` box in ui

Issue - State: closed - Opened by cpendery over 2 years ago

#75 - docs: update charter to IST wg charter

Pull Request - State: closed - Opened by cpendery over 2 years ago

#74 - Fixing install steps

Pull Request - State: open - Opened by fede2cr over 2 years ago

#73 - Bump django from 4.0.1 to 4.0.6 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 2 comments
Labels: dependencies

#72 - Bump django from 4.0.1 to 4.0.4 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#71 - Note: Renewing LetsEncrypt

Issue - State: open - Opened by scovetta over 2 years ago - 2 comments

#70 - Bump django from 4.0.1 to 4.0.2 in /src

Pull Request - State: closed - Opened by dependabot[bot] almost 3 years ago - 1 comment
Labels: dependencies

#69 - Update DNS to new infrastructure

Issue - State: open - Opened by scovetta almost 3 years ago
Labels: infrastructure

#68 - "Active" not shown

Issue - State: open - Opened by dgutson almost 3 years ago

#67 - Metrics Dashboard (Grafana) showing "None" in top bar

Issue - State: open - Opened by scovetta almost 3 years ago - 1 comment

#66 - Update Grafana due to CVE-2021-43798

Issue - State: closed - Opened by scovetta almost 3 years ago

#65 - Bump django from 3.1.12 to 3.1.13 in /src

Pull Request - State: closed - Opened by dependabot[bot] about 3 years ago
Labels: dependencies

#64 - Fix error response for API /api/1/get-project.

Pull Request - State: open - Opened by five510 about 3 years ago - 1 comment

#63 - Bump sqlparse from 0.4.1 to 0.4.2 in /src

Pull Request - State: closed - Opened by dependabot[bot] about 3 years ago
Labels: dependencies

#62 - Job Description for Contractor to productionize/improve metric dashboard

Issue - State: open - Opened by scovetta about 3 years ago - 2 comments

#61 - Scorecard not refreshing

Issue - State: closed - Opened by scovetta over 3 years ago - 2 comments

#60 - Adding Dashboard Tutorial

Pull Request - State: closed - Opened by dilanbhalla over 3 years ago

#59 - Add tutorial on how to use the dashboard, etc.

Issue - State: open - Opened by scovetta over 3 years ago - 1 comment

#58 - Added "watchers" metric and "about/summary" section from Github

Pull Request - State: closed - Opened by dilanbhalla over 3 years ago - 1 comment

#57 - Review / Update our Data Model

Issue - State: open - Opened by scovetta over 3 years ago

#56 - Review Scorecard Data - Add additional fields?

Issue - State: open - Opened by scovetta over 3 years ago - 1 comment

#55 - Update Dashboard to include Reproducibility Metrics

Issue - State: open - Opened by scovetta over 3 years ago

#54 - Convert Scorecard loading from "bq" to the BigQuery API

Issue - State: open - Opened by scovetta over 3 years ago
Labels: helpwanted

#53 - Review Dashboard Architecture / Design

Issue - State: open - Opened by scovetta over 3 years ago
Labels: helpwanted

#52 - Update scorecard loading

Pull Request - State: closed - Opened by scovetta over 3 years ago

#51 - Bug: Metrics aren't being refreshed appropriately

Issue - State: open - Opened by scovetta over 3 years ago - 7 comments

#50 - Bump websockets from 8.1 to 9.1 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies

#49 - Bump django from 3.1.8 to 3.1.12 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies

#48 - Bump django from 3.1.8 to 3.1.10 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies

#47 - Fix API error pages

Issue - State: open - Opened by scovetta over 3 years ago

#46 - Bump django from 3.1.8 to 3.1.9 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies

#45 - Bump urllib3 from 1.26.4 to 1.26.5 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies

#44 - Replace 'stars' with 'watchers'

Issue - State: open - Opened by scovetta over 3 years ago - 3 comments

#43 - Updates for the Grafana Dashboard

Issue - State: open - Opened by dilanbhalla over 3 years ago - 6 comments

#42 - Updated README to reflect new design, added template for web conf.

Pull Request - State: closed - Opened by scovetta over 3 years ago

#42 - Updated README to reflect new design, added template for web conf.

Pull Request - State: closed - Opened by scovetta over 3 years ago

#41 - Fix SSL config for prod.

Pull Request - State: closed - Opened by scovetta over 3 years ago

#40 - Add a few random projects to the home page.

Pull Request - State: closed - Opened by scovetta over 3 years ago

#39 - Bump django-debug-toolbar from 3.2 to 3.2.1 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies

#38 - Update ingestion, Grafana, etc.

Pull Request - State: closed - Opened by scovetta over 3 years ago

#37 - Bump django from 3.1.7 to 3.1.8 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies

#36 - Bump aiohttp from 3.7.3 to 3.7.4 in /src

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies

#35 - Import OpenSSF Criticality Score into dashboard

Issue - State: closed - Opened by scovetta over 3 years ago - 1 comment

#34 - Bump urllib3 from 1.26.2 to 1.26.3

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies

#33 - Fixes for security reviews script

Pull Request - State: closed - Opened by dilanbhalla over 3 years ago - 2 comments

#32 - README Fixes

Issue - State: closed - Opened by dilanbhalla over 3 years ago

#31 - Bump aiohttp from 3.7.3 to 3.7.4

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies

#30 - What analysis was done on the threats posed by a " Project Security Metrics"

Issue - State: open - Opened by cyberscribbleorg almost 4 years ago - 4 comments

#29 - Add template local settings.

Pull Request - State: closed - Opened by scovetta almost 4 years ago

#28 - Initial upload of Ingestion API code and build instructions.

Pull Request - State: closed - Opened by scovetta almost 4 years ago

#27 - Migrate to v2 codebase.

Pull Request - State: closed - Opened by scovetta almost 4 years ago

#26 - Q: Why re-do existing projects like open-hub?

Issue - State: open - Opened by ecki almost 4 years ago - 1 comment

#25 - minor corrections to readme

Pull Request - State: closed - Opened by mnimmny almost 4 years ago

#24 - Make scripts available for unix-based environments

Issue - State: closed - Opened by gsilvapt about 4 years ago - 1 comment

#23 - improve *nix build experience

Pull Request - State: closed - Opened by rhaning about 4 years ago - 1 comment

#22 - Searching for vuln reporting info outside of GH's security.md

Issue - State: closed - Opened by annabellegoth2boss about 4 years ago - 1 comment

#21 - Bump cryptography from 3.1 to 3.2 in /src

Pull Request - State: closed - Opened by dependabot[bot] about 4 years ago
Labels: dependencies

#20 - Update copyright header to OpenSSF Contributors.

Pull Request - State: closed - Opened by scovetta about 4 years ago

#19 - What should the copyright header of each file be set to?

Issue - State: closed - Opened by scovetta about 4 years ago - 3 comments

#18 - Add description, align permissions with WG.

Pull Request - State: closed - Opened by scovetta about 4 years ago

#17 - Add Docker/Composer config for local development, fix some jobs.

Pull Request - State: closed - Opened by scovetta about 4 years ago

#16 - Add CodeQL scanning.

Pull Request - State: closed - Opened by scovetta about 4 years ago

#15 - Create docker container for local development

Issue - State: closed - Opened by scovetta about 4 years ago - 1 comment

#14 - UI, scanner, docker updates.

Pull Request - State: closed - Opened by scovetta about 4 years ago

#13 - Add a CII Best Practices Badge To This Repo

Issue - State: open - Opened by dlorenc about 4 years ago

#12 - Scrape existing badges from project README files

Issue - State: open - Opened by scovetta about 4 years ago

#11 - Investigate "Go Center" metrics

Issue - State: open - Opened by scovetta about 4 years ago

#10 - Investigate measures of code complexity -> correlation to security posture?

Issue - State: open - Opened by scovetta about 4 years ago

#9 - Investigate CHAOSS for interesting metrics

Issue - State: open - Opened by scovetta about 4 years ago

#8 - Add queue mechanism for importing new projects.

Issue - State: open - Opened by scovetta about 4 years ago - 1 comment

#7 - Add a container infrastructure for analysis jobs

Pull Request - State: closed - Opened by scovetta about 4 years ago

#6 - Add tool: Application Inspector

Issue - State: closed - Opened by scovetta about 4 years ago - 1 comment

#5 - Complete initial UX layout for October MVP

Issue - State: open - Opened by scovetta about 4 years ago

#4 - Create job scheduler for analysis/processors

Issue - State: closed - Opened by scovetta about 4 years ago - 1 comment

#3 - Note: CII Best Practices badge has new mechanism for dashboards

Issue - State: open - Opened by david-a-wheeler about 4 years ago - 1 comment

#2 - Add Python requirements.

Pull Request - State: closed - Opened by scovetta about 4 years ago

#1 - Initial import.

Pull Request - State: closed - Opened by scovetta about 4 years ago

GitHub / ossf/project-security-metrics issues and pull requests