Skip to content

BUG - Scorecard version v5.5.0 doesn't work anymore with GitLab projects #5056

@ElenaLeoncavallo

Description

@ElenaLeoncavallo

Describe the bug

Scorecard version v5.5.0 doesn't work anymore with GitLab projects.

When I run 'scorecard --repo=my-gitlab-project-url --format=json'

it returns 'Check Vulnerabilities failed for my-gitlab-project-url: internal error: vulnerabilitiesClient.ListUnfixedVulnerabilities: osvscanner.DoScan: open proc/tty/driver/.gitignore: permission denied\nError: one or more checks failed during execution\n2026/05/12 13:59:05 error during command execution: one or more checks failed during execution'

The same command with version v5.4.0 works.

Reproduction steps
Steps to reproduce the behavior:

  1. I download https://github.com/ossf/scorecard/releases/download/v5.5.0/scorecard_5.5.0_linux_amd64.tar.gz
  2. extract Scorecard binary
  3. run 'scorecard --repo=my-gitlab-project-url --format=json'
  4. fails with the error: 'Check Vulnerabilities failed for my-gitlab-project-url: internal error: vulnerabilitiesClient.ListUnfixedVulnerabilities: osvscanner.DoScan: open proc/tty/driver/.gitignore: permission denied\nError: one or more checks failed during execution\n2026/05/12 13:59:05 error during command execution: one or more checks failed during execution'

Expected behavior

I expected success and results of checks in json format

Additional context

If download https://github.com/ossf/scorecard/releases/download/v5.4.0/scorecard_5.4.0_linux_amd64.tar.gz Scorecard command works correctly and returns the check results in json format.

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/bugSomething isn't working

    Type

    No type
    No fields configured for issues without a type.

    Projects

    Status

    No status

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions