Describe the bug
Scorecard version v5.5.0 doesn't work anymore with GitLab projects.
When I run 'scorecard --repo=my-gitlab-project-url --format=json'
it returns 'Check Vulnerabilities failed for my-gitlab-project-url: internal error: vulnerabilitiesClient.ListUnfixedVulnerabilities: osvscanner.DoScan: open proc/tty/driver/.gitignore: permission denied\nError: one or more checks failed during execution\n2026/05/12 13:59:05 error during command execution: one or more checks failed during execution'
The same command with version v5.4.0 works.
Reproduction steps
Steps to reproduce the behavior:
- I download https://github.com/ossf/scorecard/releases/download/v5.5.0/scorecard_5.5.0_linux_amd64.tar.gz
- extract Scorecard binary
- run 'scorecard --repo=my-gitlab-project-url --format=json'
- fails with the error: 'Check Vulnerabilities failed for my-gitlab-project-url: internal error: vulnerabilitiesClient.ListUnfixedVulnerabilities: osvscanner.DoScan: open proc/tty/driver/.gitignore: permission denied\nError: one or more checks failed during execution\n2026/05/12 13:59:05 error during command execution: one or more checks failed during execution'
Expected behavior
I expected success and results of checks in json format
Additional context
If download https://github.com/ossf/scorecard/releases/download/v5.4.0/scorecard_5.4.0_linux_amd64.tar.gz Scorecard command works correctly and returns the check results in json format.
Describe the bug
Scorecard version v5.5.0 doesn't work anymore with GitLab projects.
When I run 'scorecard --repo=my-gitlab-project-url --format=json'
it returns 'Check Vulnerabilities failed for my-gitlab-project-url: internal error: vulnerabilitiesClient.ListUnfixedVulnerabilities: osvscanner.DoScan: open proc/tty/driver/.gitignore: permission denied\nError: one or more checks failed during execution\n2026/05/12 13:59:05 error during command execution: one or more checks failed during execution'
The same command with version v5.4.0 works.
Reproduction steps
Steps to reproduce the behavior:
Expected behavior
I expected success and results of checks in json format
Additional context
If download https://github.com/ossf/scorecard/releases/download/v5.4.0/scorecard_5.4.0_linux_amd64.tar.gz Scorecard command works correctly and returns the check results in json format.