nordisk/ci-status

runs/scorecard-holger/20261029T1518Z-c1d6d1a1/scorecard.json

{
  "checks": [
    {
      "details": null,
      "documentation": {
        "short": "Determines if the project has generated executable (binary) artifacts in the source repository.",
        "url": "https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#binary-artifacts"
      },
      "name": "Binary-Artifacts",
      "reason": "binaries present in source code",
      "score": 6
    },
    {
      "details": null,
      "documentation": {
        "short": "Determines if the project's GitHub Action workflows avoid dangerous patterns.",
        "url": "https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#dangerous-workflow"
      },
      "name": "Dangerous-Workflow",
      "reason": "no workflows found",
      "score": -1
    },
    {
      "details": null,
      "documentation": {
        "short": "Determines if the project uses a dependency update tool.",
        "url": "https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#dependency-update-tool"
      },
      "name": "Dependency-Update-Tool",
      "reason": "no update tool detected",
      "score": 0
    },
    {
      "details": null,
      "documentation": {
        "short": "Determines if the project uses fuzzing.",
        "url": "https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#fuzzing"
      },
      "name": "Fuzzing",
      "reason": "project is not fuzzed",
      "score": 0
    },
    {
      "details": null,
      "documentation": {
        "short": "Determines if the project has defined a license.",
        "url": "https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#license"
      },
      "name": "License",
      "reason": "license file detected",
      "score": 9
    },
    {
      "details": null,
      "documentation": {
        "short": "Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.",
        "url": "https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#packaging"
      },
      "name": "Packaging",
      "reason": "packaging workflow not detected",
      "score": -1
    },
    {
      "details": null,
      "documentation": {
        "short": "Determines if the project has declared and pinned the dependencies of its build process.",
        "url": "https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#pinned-dependencies"
      },
      "name": "Pinned-Dependencies",
      "reason": "no dependencies found",
      "score": -1
    },
    {
      "details": null,
      "documentation": {
        "short": "Determines if the project uses static code analysis.",
        "url": "https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#sast"
      },
      "name": "SAST",
      "reason": "no SAST tool detected",
      "score": 0
    },
    {
      "details": null,
      "documentation": {
        "short": "Determines if the project has published a security policy.",
        "url": "https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#security-policy"
      },
      "name": "Security-Policy",
      "reason": "security policy file detected",
      "score": 10
    },
    {
      "details": null,
      "documentation": {
        "short": "Determines if the project's workflows follow the principle of least privilege.",
        "url": "https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#token-permissions"
      },
      "name": "Token-Permissions",
      "reason": "No tokens found",
      "score": -1
    },
    {
      "details": null,
      "documentation": {
        "short": "Determines if the project has open, known unfixed vulnerabilities.",
        "url": "https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#vulnerabilities"
      },
      "name": "Vulnerabilities",
      "reason": "10 existing vulnerabilities detected",
      "score": 0
    }
  ],
  "date": "2026-10-29T15:20:41Z",
  "metadata": null,
  "repo": {
    "commit": "unknown",
    "name": "file:///home/rickard/tgt/ci/src/holger"
  },
  "score": 2.9,
  "scorecard": {
    "commit": "61e84743356275f6ffca23b1b2f2cb945e19eb96",
    "version": "v5.6.0"
  }
}