thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Advanced

OpenSSF Scorecard

An automated tool that rates open-source projects on security practices such as branch protection, code review, signed releases and dependency updates.

Definition

Scorecard runs checks against a repository and produces scores from 0 to 10 per check. Consumers use it to assess dependency risk, and maintainers use it to improve their practices.

Example

A dependency with no branch protection, no code review and unpinned CI actions scores 3/10 and is flagged for review.

Exam tip

A supply chain tool for evaluating the trustworthiness of an open-source project.

Related terms