SaaSHub helps you find the best software and product alternatives Learn more →
Scorecard Alternatives
Similar projects and alternatives to scorecard
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
-
-
harden-runner
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
-
-
crxviewer
Add-on / web app to view the source code of Chrome / Firefox / Opera 15 extensions and zip files.
-
-
changed-files
:octocat: Github action to retrieve all (added, copied, modified, deleted, renamed, type changed, unmerged, unknown) files and directories.
-
wg-best-practices-os-developers
The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.
-
-
paths-filter
Conditionally run actions based on files modified by PR, feature branch or pushed commits
-
-
-
-
-
-
SadTalker
[CVPR 2023] SadTalker：Learning Realistic 3D Motion Coefficients for Stylized Audio-Driven Single Image Talking Face Animation
-
serverless-workflow-visualizer
Web application that uses Ably to visualize the progress of a serverless workflow.
-
gh-action-pypi-publish
The blessed :octocat: GitHub Action, for publishing your :package: distribution files to PyPI, the tokenless way: https://github.com/marketplace/actions/pypi-publish
-
NOTE:
The number of mentions on this list indicates mentions on common posts plus user suggested alternatives.
Hence, a higher number means a better scorecard alternative or higher similarity.
scorecard discussion
scorecard reviews and mentions
Posts with mentions or reviews of scorecard.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2026-02-09.
-
Hardening the Chain: Automating OpenSSF Scorecard for Linux Security 🛡️
OpenSSF Scorecard Official Site
- Show HN: Shouldiuse.dev – software dependency health checker
-
Bypassing GitHub Actions policies in the dumbest way possible
securityscorecard is easy to integrate (it's a cli tool or you run it as a github action), one of the checks it performs is "Pinned-Dependencies": https://github.com/ossf/scorecard/blob/main/docs/checks.md#p.... Checks that fail generate an security alert under Security -> Code scanning.
-
Popular GitHub Action tj-actions/changed-files is compromised
OpenSSF scorecard flags dependencies (including GitHub actions) which aren’t pinned by hash
https://scorecard.dev/
https://github.com/ossf/scorecard/blob/main/docs/checks.md#p...
-
Introducing OpenSSF Scorecard for OpenSauced
The OpenSSF Scorecard project is an effort to unify what best practices open source maintainers and consumers should use to judge if their code, practices, and dependencies are safe. Ultimately, the “scorecard” command line interface gives any the capability to inspect repositories, run “checks” against those repos, and derive an overall score for the risk profile of that project. It’s a very powerful software tool that gives you a general picture of where a piece of software is considered risky. It can also be a great starting point for any open source maintainer to develop better practices and find out where they may need to make improvements. By providing a standardized approach to assessing open source security and compliance, the Scorecard helps organizations more easily identify supply chain risks and regulatory requirements.
- Scorecard: Assess Open Source Project Security
-
Safe and Secure Consumption of Open Source Libraries
Scorecard checks are based on OpenSSF Scorecard Project
- Alert for Social Engineering Takeovers of Open Source Projects
-
Can some expert analyze a github repo and tell us if it's really safe or not?
For general open source hygiene, I'd recommend running OpenSSF scorecards on your github repo and following-up on anything it suggests. https://github.com/ossf/scorecard.
-
Securizing your GitHub org
The OSSF scorecard initiative is really good to assess your project against security best practices. I am not the first to write about this.
-
A note from our sponsor - SaaSHub
www.saashub.com | 7 Jun 2026
Stats
Basic scorecard repo stats
35
5,475
9.1
5 days ago
ossf/scorecard is an open source project licensed under Apache License 2.0 which is an OSI approved license.
The primary programming language of scorecard is Go.
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com