ossf
Feature: Support for Azure DevOps
Is your feature request related to a problem? Please describe. Scorecards currently supports GitHub and GitLab as source code platforms, but Azure DevOps could also benefit from Scorecard
Describe the solution you'd like Support for most of the checks that are supported on GitHub and GitLab to also be supported on Azure DevOps
Describe alternatives you've considered Not supporting Azure DevOps? 😅
Additional context I am interested in implementing this myself, but it'll likely be across multiple smaller PRs.
This issue has been marked stale because it has been open for 60 days with no activity.
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "Published by a pub.dev verified publisher"){kind=small}
This issue has been marked stale because it has been open for 60 days with no activity.
This issue has been marked stale because it has been open for 60 days with no activity.
Remaining unimplemented:
-
GetOrgRepoClient- This is a GitHub-only feature
-
ListLicenses- Azure DevOps doesn't have a license detection feature. Thankfully the
Licensecheck falls back to file-based detection
- Azure DevOps doesn't have a license detection feature. Thankfully the
-
ListReleases- Azure DevOps doesn't have the concept of 'a release' in the same way that GitHub or GitLab do
- In Azure DevOps a release is a pipeline
- Scorecard expects a 'release' to have a git tag and release assets
I believe the Azure DevOps client initial implementation is complete.
Still need to setup integration tests in https://dev.azure.com/openssf-scorecard/