Scorecard should try to earn a CII Best Practices badge

[david-a-wheeler]

Is your feature request related to a problem? Please describe.
Scorecard should try to earn a CII Best Practices badge.

Additional context
Both scorecard & the CII Best Practices badge are OpenSSF projects focused on best practices to improve OSS security. They have different approaches and somewhat different criteria, but I think each would be helped by working on the other. I'm the lead of the CII Best Practices badge project, and I'm trying to meet the scorecard criteria (or complain when I think there's a problem). I think it'd be great if scorecard reciprocated.

[github-actions]

Stale issue message

[naveensrinivasan]

Not stale.

[david-a-wheeler]

Happy to help if you'd like!

[naveensrinivasan]

Yes,Thank you! What is the process?

[laurentsimon]

I've started the process by clicking "get a badge". Waiting for OSSF to accept the OAuth request.

[david-a-wheeler]

@laurentsimon - presuming you're logged into GitHub, the "get a badge" click should have gotten you to a list & getting started pretty quickly. If you're hung, something is wrong.

To start you should be able to just go to the best practices home page, click on "Get Your Badge Now!", log in, and tell it the URL of scorecard https://github.com/ossf/scorecard.

What happened? If you're stuck I want to make sure you (& anyone else) gets unstuck :-).

[laurentsimon]

I indeed got a list of repos, but ossf/scorecard does not show up. I think it's because the OAuth does not have the scope to read it, I see "Access request pending" under Installation > Application

[azeemshaikh38]

@justaugustus assigning this to you since you earned Scorecard a CII Best Practices badge (yay, thanks a lot!). We can close this unless you plan on working on this further and want to use this to track your progress.

[justaugustus]

@justaugustus assigning this to you since you earned Scorecard a CII Best Practices badge (yay, thanks a lot!). We can close this unless you plan on working on this further and want to use this to track your progress.

Will keep this open as there's still a bunch to do! :)

[github-actions]

This issue is stale because it has been open for 60 days with no activity.

[afmarcum]

@justaugustus Scorecard now has a "passing" BP badge. Do we want to continue working toward silver or gold level badges at this time or do we consider this issue done?

[justaugustus]

Closing this, as leaving it open for all badge levels might be too much.

I'll open additional issues as needed, as part of the "Apply for appropriate status in OpenSSF project lifecycle" task in #4073.