Scorecard RnD

Description du marché

The research and development service relates to the open source component “scoredcard RnD”. Scorecard is an open source security tool designed to automatically analyze and assess the security posture of open source projects. It performs audits of repositories to generate security metrics that identify vulnerabilities in areas such as branch protection, code review practices, dependency management and workflow configurations. Scorecard is particularly relevant due to the increase in supply chain attacks and new regulatory requirements for software security. It serves the public interest by improving the security of critical digital infrastructures.

Pouvoir adjudicateur