Skip to content

Add oneMATH OpenSSF Scorecard badge #652

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
May 1, 2025
Merged

Conversation

vmalia
Copy link
Contributor

@vmalia vmalia commented Mar 19, 2025

Description

Implementation for uxlfoundation/open-source-working-group#107

Changes

Add OpenSSF Scorecard and result to the README.

Preview:

image

@vmalia vmalia requested a review from a team as a code owner March 19, 2025 19:31
@vmalia vmalia self-assigned this Mar 19, 2025
Copy link
Contributor

@sknepper sknepper left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is awesome, thanks @vmalia !
I noticed in oneDNN after their transition to uxlfoundation that their OpenSSF Scorecard location was updated: https://securityscorecards.dev/viewer/?uri=github.com/uxlfoundation/oneDNN

Probably we want to obtain and use a similar one for oneMath. Currently this seems to still be using the github.com/oneapi-src/oneMKL URL.

@vmalia
Copy link
Contributor Author

vmalia commented Mar 21, 2025

This is awesome, thanks @vmalia ! I noticed in oneDNN after their transition to uxlfoundation that their OpenSSF Scorecard location was updated: https://securityscorecards.dev/viewer/?uri=github.com/uxlfoundation/oneDNN

Probably we want to obtain and use a similar one for oneMath. Currently this seems to still be using the github.com/oneapi-src/oneMKL URL.

Yeah I noticed that too, but did not know we had a new UXL URL available.
@itopinsk do you know how to make this change request?

@vmalia
Copy link
Contributor Author

vmalia commented Mar 28, 2025

It was found through internal discussions that OpenSSF repository still uses the oneapi-src organization, but someone somewhere (Intel or OpenSSF side) is redirecting the uxlfoundation links back to oneapi-src links, and there is a bug that oneMATH redirection links are broken.
Will include openssf folks to triage where to make the change.

Copy link
Contributor

@sknepper sknepper left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is great, thanks Viraj!

@vmalia vmalia merged commit 5fcb54c into uxlfoundation:develop May 1, 2025
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants