docker
/
docs
mirror of https://github.com/docker/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #20312 from dvdksn/health-score-agpl-license 

scout: health score only consider AGPL
This commit is contained in:
David Karlsson 2024-07-01 17:53:15 +02:00 committed by GitHub
parent 034b68eb3a 69319a6781
commit 405153a565
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 11 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.github/vale/config/vocabularies/Docker/accept.txt vendored
View File

@ -1,4 +1,4 @@
A?GPLv3
A?GPL(v3)?
APIs?
ARM
AWS

17
content/scout/policy/scores.md
View File

@ -105,13 +105,16 @@ The policies that influence the score, and their respective weights, are as foll
| Policy | Points |
| --------------------------------------------------------------------------------------------------------- | ------ |
| [Fixable Critical and High Vulnerabilities](./_index.md#fixable-critical-and-high-vulnerabilities) | 20 |
| [High-Profile Vulnerabilities](./_index.md#high-profile-vulnerabilities) | 20 |
| [Supply Chain Attestations](./_index.md#supply-chain-attestations) | 15 |
| [Unapproved Base Images](./_index.md#unapproved-base-images) | 15 |
| [Outdated Base Images](./_index.md#outdated-base-images) | 10 |
| [Default Non-Root User](./_index.md#default-non-root-user) | 5 |
| [Copyleft Licenses](./_index.md#copyleft-licenses) | 5 |
| [Fixable critical and high vulnerabilities](./_index.md#fixable-critical-and-high-vulnerabilities) | 20 |
| [High-profile vulnerabilities](./_index.md#high-profile-vulnerabilities) | 20 |
| [Supply chain attestations](./_index.md#supply-chain-attestations) | 15 |
| [Unapproved base images](./_index.md#unapproved-base-images) | 15 |
| [Outdated base images](./_index.md#outdated-base-images) | 10 |
| [Default non-root user](./_index.md#default-non-root-user) | 5 |
| AGPL v3-licensed software \* | 5 |
\* _The **AGPL v3-licensed software** policy is a subset of the
[Copyleft licenses](./_index.md#copyleft-licenses) policy._
### Evaluation