ScoreCode is a tool for assessing the security and compliance of software projects. It evaluates various aspects of a project’s security posture and generates a scorecard to help organizations understand the security risks associated with the software.
Features: - Automated security assessment - Comprehensive scoring based on multiple criteria - Easy integration with existing workflows - Supports various platforms and repositories
Installation
To install Scorecard, you can use pip:
pip install scorecodeUsage
To use Scorecard, you need to call the fetch_scorecard function with the appropriate parameters. Below is a basic usage example:
from scorecode.ossf_scorecard import fetch_scorecard
# Fetch the scorecard data for a specific platform org and repo
data = fetch_scorecard(platform="github.com", org="nexB", repo="scancode-toolkit")
# Print the results
print("Scoring Tool:", data.scoring_tool)
print("Scoring Tool Version:", data.scoring_tool_version)
print("Score Date:", data.score_date)
print("Score:", data.score)
print("Documentation URL:", data.scoring_tool_documentation_url)Testing
To run the tests, use pytest. Ensure that all dependencies are installed and then execute:
make test4 maintainers
Metadata
4 maintainers
Release files for scorecode 0.0.4
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| scorecode-0.0.4.tar.gz | 67.9 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| scorecode-0.0.4-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 80.0 kB
Release files / scorecode-0.0.4.tar.gz
| Download URL | scorecode-0.0.4.tar.gz |
|---|---|
| Size | 67.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
4a7b3bc4fa600ed2f26f0737e4a5b6fc445dfce8b61a4bee894495794f6cad4b
|
|
BLAKE2b-256 checksum How to use checksums |
76f5a02d0c9fb01e0fa358aefcb0e7c8876d32af60f067844cf3474872cf2123
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.1.0 CPython/3.12.9
|
Release files / scorecode-0.0.4-py3-none-any.whl
| Download URL | scorecode-0.0.4-py3-none-any.whl |
|---|---|
| Size | 12.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
5aa015ced4f3a5cf89d631c43b385114ab6634dc555553f48f2a26a4679a5135
|
|
BLAKE2b-256 checksum How to use checksums |
4d7d5ff7b97ec64920984cd8d9ed0c0f219e735b02a9d98e65b4b27811cb0fed
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.1.0 CPython/3.12.9
|
