Skip to content

Add data to LFX Insights from OpenSSF Best Practices Badge project #1946

Description

@david-a-wheeler

Is your feature request related to a problem? Please describe.

LFX Insights shows some security & best practices data, but it doesn't seem to be taking advantage of the data from OpenSSF's bestpractices.dev site even when it's available.

Describe the solution you'd like

Pull data from bestpractices.dev. At the least, show a metal series or baseline series badge if it's earned one. You can also retrieve the JSON data to get fine-grained information on which OpenSSF baseline criteria it's met. More info: https://github.com/coreinfrastructure/best-practices-badge/blob/main/docs/api.md

Describe alternatives you've considered

You can do it all yourself, but it's better to grab data where it's available.

Additional context

Feel free to contact me for questions! dwheeler (at) linuxfoundation (dot) org. Thanks!

Metadata

Metadata

Assignees

No one assigned

    Labels

    featureNew feature or request

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions