core

core copied to clipboard

Aggregate Scorecards metrics on a new package release

3

This issue is part of the following **EPIC**: https://github.com/thoth-station/core/issues/434 **_2. Compute metrics for packages present in Thoth's database that will serve as a basis for a global software stack quality...

mayaCostantini

Provide Maintenance related scoring as a informational comment to Pull Requests

1

reopen of https://github.com/open-services-group/scrum/issues/28

goern

Security confidence addition to the images for more clear traceability and security

13

**Is your feature request related to a problem? Please describe.** The plan is to have a process in place to add score/confidence based on the base image and package security...

harshad16

[EPIC] [MVP] Improvements to Thoth advises output

5

## Problem statement As a Python Developer, I would like to have concise information about the quality of my software stack and all its transitive dependencies, so that I get...

mayaCostantini

[Epic] Contribute to successful usage of Thoth Service in the OS-Climate project

8

## Problem statement The [aicoe-osc-demo repository](https://github.com/os-climate/aicoe-osc-demo) is, at the moment, not taking full advantage of Thoth services. ## High-level Goals We would like that Thoth's guidance and pipeline services are...

codificat

[EPIC] Have clustered advise outputs

4

## Problem statement As a user of Thoth adviser, I want to be able to sort and filter through the justifications provided after an advise so that I can find...

Gkrumbach07

Automate cascade releases for s2i images

8

**Is your feature request related to a problem? Please describe.** Every time an update is released is made on a package that is part of a base image, we have...

codificat

[3pt] Document Thoth's requirement for dependencies to be in an index

8

## Problem statement As a Thoth user, I am frustrated because Thoth can not provide advise about my application software stack, because my `Pipfile` references modules that are not hosted...

codificat

Data driven decisions based on data from PyPI

7

**Is your feature request related to a problem? Please describe.** As a user of Thoth, I would like to get guidance on which software is used in the Python community....

fridex

Evaluate possible integration with OpenSSF package analysis

5

See: https://openssf.org/blog/2022/04/28/introducing-package-analysis-scanning-open-source-packages-for-malicious-behavior/ https://github.com/ossf/package-analysis Let's check if data produced by this tool are valuable for Thoth. If so, let's see what our integration points look like. - [ ] check what...

fridex