Search results

GitHub Actions dependencies reported as "unknown license" despite having valid MIT licenses

needs triage

Status: Open.

#5090 In ossf/scorecard;

· iemejia opened on Jun 7, 2026

BUG: --local mode returns N/A for workflow/policy checks on Windows due to path separator handling

kind/bugSomething isn't workingSomething isn't working

Status: Open.

#5088 In ossf/scorecard;

· Shtirmann opened on Jun 5, 2026

URML: single Scorecard run vs per-repo for a multi-runtime project?

Status: Open.

#5079 In ossf/scorecard;

· idoco2003 opened on May 29, 2026

BUG: CII-Best-Practices scores 0 on sibling repos of a single-badge multi-repo project

kind/bugSomething isn't workingSomething isn't working

needs triage

Status: Open.

#5078 In ossf/scorecard;

· xmudrii opened on May 29, 2026

BUG: YAML parsing error

kind/bugSomething isn't workingSomething isn't working

needs triage

Status: Open.

#5072 In ossf/scorecard;

· brynpickering opened on May 27, 2026

Dependency-Update-Tool false negative when config file is marked export-ignore in .gitattributes

needs triage

Status: Open.

#5069 In ossf/scorecard;

· wnstfy opened on May 22, 2026

Allow LICENSE File to be located in /.github Directory

kind/enhancementNew feature or requestNew feature or request

needs triage

Status: Open.

#5068 In ossf/scorecard;

· Chrimle opened on May 20, 2026

scorecard Pinned-Dependencies: uv.lock is not good enough?

Status: Open.

#5057 In ossf/scorecard;

· alanwilter opened on May 13, 2026

BUG - Scorecard version v5.5.0 doesn't work anymore with GitLab projects

kind/bugSomething isn't workingSomething isn't working

Status: Open.

#5056 In ossf/scorecard;

· ElenaLeoncavallo opened on May 12, 2026

Recognize Homebrew Core formulae as packages

kind/enhancementNew feature or requestNew feature or request

needs triage

Status: Open.

#5042 In ossf/scorecard;

· rgoldberg opened on May 1, 2026

BUG: tarball extraction fails with "file exists" error when archive contains duplicate directory entries

kind/bugSomething isn't workingSomething isn't working

Status: Open.

#5023 In ossf/scorecard;

· juanis2112 opened on Apr 17, 2026

ACMM: AI Codebase Maturity Model — similar to OpenSSF badges but for AI-assisted engineering

needs triage

Status: Open.

#5021 In ossf/scorecard;

· clubanderson opened on Apr 16, 2026