ShipReady MetricsShipReady Metrics
Get started

slsa-framework/slsa

29/ 100 readinessbackend

Analyzed commit 4d3f9d44a803 · 2026-11-05 · 2/7 met · engine scoring-engine/1.0.0. Based on publicly available repository evidence.

README badge:ShipReady readiness badge for slsa-framework/slsa[![ShipReady](https://shipreadymetrics.com/api/badge/github/slsa-framework/slsa)](https://shipreadymetrics.com/github/slsa-framework/slsa)
Metric categoryResult
dependency-healthManual
securityNot Measured
testingPassed
ci-cdPassed
observabilityManual
lifecycleNot Measured
accessibilityNot Applicable
api-securityNot Measured
iac-qualityNot Applicable
data-qualityNot Applicable
ml-governanceNot Applicable
mobile-releaseNot Applicable

From a public score to a check on every PR

  1. 1

    Score a public repository

    Paste a public GitHub URL. The report is built from publicly available repository evidence — no install, no account, nothing to configure.

    Score another repository
  2. 2

    Put the badge in your README

    Every public report carries a copy-paste README badge that links back to the full report and refreshes as the repository changes.

  3. 3

    Install the GitHub App

    Installing reads your private repositories the same least-privilege way and turns the one-off report into a tracked score. Installing happens from your workspace, so this starts with an account.

    Create an account to install
  4. 4

    Get a check on every pull request

    With the App installed, ShipReady posts a check on each pull request covering only what that diff changed — new findings and fixed ones, never a re-blame of code the PR never touched.

    How the check works