Code Quality (3)

• BadgeApp (bestpractices.dev) tool
  Free self-certification app where FLOSS projects answer OpenSSF criteria to earn a passing badge
  Supply Chain Security Web Application #
• Home (OpenSSF Scorecard) tool
  Automated repo checks (branch protection, pinned deps, signing) run as GitHub Action or CLI
  Supply Chain Security Vulnerability #
• ShellCheck – shell script analysis tool (shellcheck.net) tool
  Catches quoting, portability and logic bugs in bash/sh; paste a script into the browser or run it locally
  Command Line Shell Scripting #