Closed
Description
This repo is signed up as part of the KubeCon Security Slam. I'm bringing to your attention the checklist from the official CLOMonitor page for K8GB -- it refreshes every hour, so it should be up-to-date.
CLOMonitor report
Summary
Repository: k8gb
URL: https://github.com/k8gb-io/k8gb
Checks sets: COMMUNITY
+ CODE
Score: 84
Checks passed per category
Category | Score |
---|---|
Documentation | 93% |
License | 100% |
Best Practices | 85% |
Security | 75% |
Legal | 0% |
Checks
Documentation [93%]
- Adopters (docs)
- Changelog (docs)
- Code of conduct (docs)
- Contributing (docs)
- Governance (docs)
- Maintainers (docs)
- Readme (docs)
- Roadmap (docs)
- Website (docs)
License [100%]
- Apache-2.0 (docs)
- Approved license (docs)
- License scanning (docs)
Best Practices [85%]
- Analytics (docs)
- Artifact Hub badge (docs)
- Contributor License Agreement (docs)
EXEMPT
- Community meeting (docs)
- Developer Certificate of Origin (docs)
- Github discussions (docs)
EXEMPT
- OpenSSF badge (docs)
- Recent release (docs)
- Slack precense (docs)
Security [75%]
- Binary artifacts (docs)
- Code review (docs)
- Dangerous workflow (docs)
- Dependency update tool (docs)
- Maintained (docs)
- Software bill of materials (SBOM) (docs)
- Security policy (docs)
- Signed releases (docs)
- Token permissions (docs)
Legal [0%]
- Trademark disclaimer (docs)
For more information about the checks sets available and how each of the checks work, please see the CLOMonitor's documentation.
Metadata
Assignees
Labels
No labels
Activity