oscal-compass/compliance-trestle

Improve OpenSSF score

Open

#2,018 opened on Dec 18, 2025

View on GitHubContributor guide
 (6 comments) (0 reactions) (1 assignee)Python (103 forks)auto 404
event/slamexempt-from-stalegood first issuehelp wanted

Repository metrics

Stars
 (264 stars)
PR merge metrics
 (PR metrics pending)

Description

Notes:

  • Signed Releases has been addressed and will improved as more releases are produced.
  • High and medium are the most desirable for improvement, however any improvement is welcomed!
  • Fuzzing is presently at 0.

Contributor guide

Research direction
Analyze the OpenSSF score badge for the repository, identify specific areas to improve (e.g., fuzzing, signed releases, CI/CD), and implement enhancements such as adding fuzzing tests or configuring signed releases.
Tech stack
python
Domain
securitydevops
Issue type
Chore
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Mostly clear
Prerequisites
GitPython
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
45