Hacker GitHub

← All repos

ossf/best-practices-badge

View on GitHub ↗ ★ 1,372 Ruby

🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)

26 mentions on Hacker News by 10 people: 4 stories, 22 comments · first 2015-10-10 · latest 2025-05-22

Mentions per year 26 mentions · busiest year 2017 (8)
20082026
AllStoriesComments NewestTopOldest
  1. …of its package archive it can’t legally distribute... Related: netadata to be removed form Debian https://github.com/coreinfrastructure/best-practices-badge/i...
    comment by frainfreeze · 2025-05-22 · in Why does Debian change software?
  2. …to free/libre open source software) but is now under discussion for removal because of the blobs - https://github.com/coreinfrastructure/best-practices-badge/i... . Major Linux distros are also aware of this issue. Debian - still ships the…
    comment by arun-mani-j · 2024-08-16 · in Tell HN: Netdata is shipping their new dashboard as closed source blobs
  3. …a click), and that site only receives information from the specific user who requested it." Source: https://github.com/coreinfrastructure/best-practices-badge/b... Suh's page: https://jonsuh.com/blog/social-share-links/#use-share-urls I…
    comment by dwheeler · 2019-11-21 · in Dear Facebook: Stop cross site tracking by default
  4. …specifically designed to implement cryptographic functions; it SHOULD NOT re-implement its own." https://github.com/coreinfrastructure/best-practices-badge/b... Full disclosure: I lead the CII Best Practices badge project.
    comment by dwheeler · 2019-07-08 · in RSA is a fragile cryptosystem
  5. …). The badging application is itself open source software; its project site is: https://github.com/coreinfrastructure/best-practices-badge/ (Disclosure: I'm technical lead of the BadgeApp project. Hi Dan!)
    comment by dwheeler · 2018-11-24 · in Software Checklist (2014)
  6. …I'd regard it as universally applicable to any and all code. This list gets you in the door: https://github.com/coreinfrastructure/best-practices-badge/b... And this is the list that gets you a gold star rating:…
    comment by exikyut · 2018-10-07 · in The Only Linux Foundation CII Gold Rated Project Is a .. PHP Markdown Parser
  7. Whats the point being made? This is more useful: https://github.com/coreinfrastructure/best-practices-badge
    comment by gtirloni · 2018-10-07 · in The Only Linux Foundation CII Gold Rated Project Is a .. PHP Markdown Parser
  8. …OAuth connections to GitHub and authorizing an app there. Here is the test that does so: https://github.com/coreinfrastructure/best-practices-badge/b...
    comment by dankohn1 · 2018-04-22 · in Software Testing Anti-patterns
  9. …yellow when you're out of date and red when there's a vulnerability. Free for open source. See https://github.com/coreinfrastructure/best-practices-badge#c... for an example.
    comment by dankohn1 · 2017-08-27 · in Ask HN: How do you keep track of node packages/ruby gems security issues?
  10. …master.bestpractices.coreinfrastructure.org, and also run staging and production environments. See https://github.com/coreinfrastructure/best-practices-badge/b... My question is when switching to a Docker workflow, does it make sense to…
    comment by dankohn1 · 2017-07-11 · in Launching Today: CircleCI 2.0 Reaches General Availability
  11. …by using one the first image to build my gems, and then copying the gems to the final image. < https://github.com/coreinfrastructure/best-practices-badge/b... However, that doesn't fix the problem of having lots of development and test…
    comment by dankohn1 · 2017-07-11 · in Launching Today: CircleCI 2.0 Reaches General Availability
  12. …same Docker image that passes tests on CircleCI in production? I have an open source Rails app < https://github.com/coreinfrastructure/best-practices-badge> that self-certifies that open source projects are following best practices. It…
    comment by dankohn1 · 2017-07-11 · in Launching Today: CircleCI 2.0 Reaches General Availability
  13. …app, and that's a good thing. [0] https://github.com/kossnocorp/jquery.turbolinks/issues/56 [1] https://github.com/linuxfoundation/cii-best-practices-badge/...
    comment by dwheeler · 2017-01-23 · in Shopify now on Rails 5.0. started 12 years ago on 0.5, the First version released
  14. …Rails 5, so I needed to fork it [2]. I too am hugely appreciative of the Rails ecosystem. [0] https://github.com/linuxfoundation/cii-best-practices-badge/ [1] https://github.com/linuxfoundation/cii-best-practices-badge/... [2]…
    comment by dankohn1 · 2017-01-21 · in Shopify now on Rails 5.0. started 12 years ago on 0.5, the First version released
  15. …badge ( https://bestpractices.coreinfrastructure.org ) also has an assurance case; details at https://github.com/linuxfoundation/cii-best-practices-badge/... . If you want to help us make that better, let us know!
    comment by dwheeler · 2017-01-15 · in Google Infrastructure Security Design Overview
  16. …is that "The project sites (website, repository, and download URLs) MUST support HTTPS using TLS.": https://github.com/linuxfoundation/cii-best-practices-badge/... I think making GitLab pages part of the community edition will make it…
    comment by dwheeler · 2016-12-24 · in Bringing GitLab Pages to the Community Edition
  17. …much higher level exercise discussing proper APIs and code structuring, not sphaghetti issues. [0] https://github.com/linuxfoundation/cii-best-practices-badge/... [1] https://github.com/mmozuras/pronto [2]…
    comment by dankohn1 · 2016-09-16 · in What to Do When Your Colleague Creates Spaghetti Code
  18. …66 practices that all open source software, including scientific software, should be following. [0] https://github.com/linuxfoundation/cii-best-practices-badge/... (Disclosure: I'm a co-founder of the project. It's completely free and open…
    comment by dankohn1 · 2016-08-28 · in Why bad scientific code beats code following “best practices” (2014)
  19. …you can review and comment on the criteria. [0] https://bestpractices.coreinfrastructure.org/ [1] https://github.com/linuxfoundation/cii-best-practices-badge/
    comment by dankohn1 · 2016-05-03 · in Linux Foundation launches badge program to boost open source security
  20. …Best Practices Badge project for one attempt at measuring the "health" of an open source project. https://github.com/linuxfoundation/cii-best-practices-badge#...
    comment by dankohn1 · 2016-03-22 · in Cross-platform Rust rewrite of the GNU coreutils
  21. Thanks. We added a link to that to our background document here: https://github.com/linuxfoundation/cii-best-practices-badge/...
    comment by dankohn1 · 2015-12-08 · in Best Practices for Open Source Software
  22. https://github.com/linuxfoundation/cii-best-practices-badge/...
    comment by walterbell · 2015-10-10 · in The Final Leaked TPP Text Is All That We Feared