Issues

• Investigate JavaScript fuzzing workflow options

  ossf/scorecard-webapp#1046 · Filter by author justaugustus opened on Sep 8, 2026

• [BUG] Malformed branch-protection response

  ossf/scorecard-webapp#1030 · Filter by author damsien opened on Aug 26, 2026

• BUG: Overlapping content in scorecard.dev

  ossf/scorecard-webapp#1018 · Filter by author juanis2112 opened on Aug 17, 2026
  2

• Rekor v2 removed the search-by-hash index; result verification depends on it

  ossf/scorecard-webapp#999 · Filter by author justaugustus opened on Aug 7, 2026

• 400 when attempting to post with new workflow schema elements

  ossf/scorecard-webapp#974 · Filter by author bckohan opened on Jun 1, 2026

• User stories list: website feedback

  ossf/scorecard-webapp#960 · Filter by author lasomethingsomething opened on Apr 8, 2026
  1

• Support case-insensitive scorecard lookups

  ossf/scorecard-webapp#788 · Filter by author AlexGustafsson opened on Jun 5, 2025

• Firefox 138 rendering of scorecard's score shows weird characters

  buggood first issuehelp wanted
  ossf/scorecard-webapp#786 · Filter by author nitrocode opened on May 29, 2025
  2

• BUG REST API and website response

  buggood first issuehelp wanted
  ossf/scorecard-webapp#779 · Filter by author iaskipko opened on Apr 17, 2025
  1

• BUG: report not found

  good first issuehelp wanted
  ossf/scorecard-webapp#692 · Filter by author chimera97 opened on Jun 14, 2024
  2

• Docs: clarify wording around security risk

  documentationgood first issuehelp wanted
  ossf/scorecard-webapp#639 · Filter by author hyandell opened on May 27, 2024

• Fetch Sigstore trust root through TUF

  ossf/scorecard-webapp#605 · Filter by author Hayden-IO opened on Apr 15, 2024
  4

• "Risk level" highly misleading (Dangerous-Workflow always "CRITICAL"). Scorecard report ("webviewer") seems broken

  ossf/scorecard-webapp#622 · Filter by author Chealer opened on Apr 2, 2024
  3

• Upload from GitLab CI fails with repository and branch of cert doesn't match that of request

  ossf/scorecard-webapp#561 · Filter by author jamietanna opened on Feb 20, 2024
  4

• GitLab Projects in Subgroups

  ossf/scorecard-webapp#511 · Filter by author adam-moss opened on Dec 6, 2023
  6

• Please adopt OpenSSF Security Insights for this project

  ossf/scorecard-webapp#478 · Filter by author caabernathy opened on Oct 4, 2023

• Implement cache for imposter commit validation

  apienhancement
  ossf/scorecard-webapp#462 · Filter by author spencerschrock opened on Aug 29, 2023

• getResult REST API leads to Web Proxy errors when repositories look like file names

  ossf/scorecard-webapp#432 · Filter by author brunon opened on Jul 2, 2023

• Viewer should sort checks alphabetically within threat categories

  ossf/scorecard-webapp#430 · Filter by author pnacht opened on Jun 26, 2023
  1

• [Scorecard Viewer] Feature: show grayed out the checks whose results aren't available

  ossf/scorecard-webapp#427 · Filter by author diogoteles08 opened on Jun 22, 2023
  3

• [Proposal] Standardize Name for Scorecard Checks in OpenAPI Spec

  apienhancement
  ossf/scorecard-webapp#380 · Filter by author abhisek opened on Apr 25, 2023

• Drop BigQuery and just provide a data dump or paginate API

  enhancement
  ossf/scorecard-webapp#375 · Filter by author gitgitwhat opened on Apr 14, 2023
  1

• Complement certain checks via cron

  ossf/scorecard-webapp#280 · Filter by author laurentsimon opened on Dec 10, 2022

• Deployment instructions

  documentationgood first issuehelp wanted
  ossf/scorecard-webapp#238 · Filter by author naveensrinivasan opened on Oct 23, 2022
  1

  

• Failure of OSS-fuzz

  fuzzing
  ossf/scorecard-webapp#220 · Filter by author naveensrinivasan opened on Oct 1, 2022