-
Notifications
You must be signed in to change notification settings - Fork 593
Description
Is your feature request related to a problem? Please describe.
I work in an environment where the majority of the software project cannot be open source due to a variety of security and need-to-know requirements. However, we'd like to take advantage of some of the great tools made available by the OpenSSF, so we're looking at standing up internal instances of the Best Practices Badge App and securityscorecards.dev. Once we have the internal Badge App stood up, it would be great if we could just point scorecard to it in some way.
Describe the solution you'd like
I'm flexible on implementation details, and trust whatever you think is best. Some potential solutions that come to mind:
- Environment variable: E.g.,
CII_BEST_PRACTICES_URL=https://bestpractices.company.com scorecard --repo internal-gitlab.company.com/{owner}/{repo}. - Command line option: E.g.,
scorecard --repo internal-gitlab.company.com/{owner}/{repo} --cii-best-practices-url https://bestpractices.company.com.
Describe alternatives you've considered
If this enhancement is undesirable, we can always fork this project internally and replace all instances of https://www.bestpractices.dev with our internal Badge App URL. Looks like that would only need to happen in
clients/cii_http_client.gocron/internal/cii/main.go
plus updating some links in a few Markdown and YAML files if we want to be consistent across the board.
Additional context
N/A
Metadata
Metadata
Assignees
Labels
Type
Projects
Status