An open API service indexing awesome lists of open source software.

https://github.com/youhaveme9/reposcore

Assign a security score based on different well-defined security criteria
https://github.com/youhaveme9/reposcore

Last synced: 7 months ago
JSON representation

Assign a security score based on different well-defined security criteria

Awesome Lists containing this project

README

          

## Github Repository security score

A python application to scan github repositories and assign a security score based on different well-defined security criterias and provides recommendation to improve the score

#### Scoring Factors

- Vulnerability in dependencies
- Outdated Dependencies
- Leaked secrets
- Repository Activity
- CI/CD misconfigurations*
- OWASP Score*
- Dependency popularity*

#### Installation
1. Install uv from [here](https://github.com/astral-sh/uv)
2. Install dependencies
```bash
$ uv sync
```
3. Activate virtual env created by uv
```bash
$ source .venv/bin/activate
```

#### Usages

```bash
$ uv run main.py --url
```