OpenSSF Scorecard
Loading the README
- v5.5.02026-04-23The official Scorecard docker images are hosted on GitHub Container Registry starting with v5.5.0.
- v5.4.02025-11-14:sparkles: Added CLI flags to scan multiple repositories --repos, or an entire GitHub organization --org (#4793, @gabri…
- v5.3.02025-09-30:bug: Scorecard now skips dangling symlinks and detects symlink path traversal when run on local files. Note: Scorecard…
- v5.2.12025-05-30:bug: Fix pinned check for Dockerfiles with from scratch
- v5.2.02025-05-27:sparkles: Scorecard can now generate its output as an in-toto statement by specifying --format=intoto (#4491, @puerco)
✓ signed The latest release, v5.5.0, carries a signature GitHub verified.
Loading the security report