Go to file
Chris Swan 35034df1ca
docs: Clarify OpenSSF Best Practices vs Scorecard
SECURITY.md has a recently added section titled OpenSSF Scorecard
that actually documents OpenSSF Best Practices. Scorecard [0] is a
different OpenSSF project, that incorporates Best Practices, but is
distinct in its objectives and how it achieves them.
This change clarifies the terminology, and also removes any
implication that Gold Best Practices is an award rather than a self
certification programme.
As curl was a leader in implementing Best Practices some folk may be
more familiar with the earlier Core Infrastructure Initiative (CII)
naming, so a reference to that has been added.

[0] https://scorecard.dev/

Signed-off-by: Chris Swan <478926+cpswan@users.noreply.github.com>
Ref: #14319
Closes #14635
2024-08-22 11:50:20 +02:00
.circleci GHA/macos: improve, fix gcc/llvm, add new test matrix 2024-07-19 12:45:18 +02:00
.github tests: constrain http pytest to tests/http directory 2024-08-22 11:47:10 +02:00
CMake cmake: tidy up option descriptions 2024-08-21 23:36:12 +02:00
docs build: make CURL_FORMAT_CURL_OFF_T[U] work with mingw-w64 <=7.0.0 2024-08-22 10:45:04 +02:00
include tidy-up: spelling 'built-in' 2024-08-20 21:32:40 +02:00
lib sectransp: fix setting tls version 2024-08-22 11:48:49 +02:00
LICENSES
m4 build: improve compiler version detection portability 2024-08-20 11:02:31 -07:00
packages tidy-up: misc spelling (bit, ASCII) 2024-08-15 15:30:09 +02:00
plan9
projects tidy-up: adjust casing of project names (continued) 2024-08-20 00:44:04 +02:00
scripts managen: wordwrap long example lines in ASCII output 2024-08-16 08:57:19 +02:00
src src: fix potential macro confusion in cmake unity builds 2024-08-22 10:45:04 +02:00
tests tests: constrain http pytest to tests/http directory 2024-08-22 11:47:10 +02:00
winbuild tidy-up: OS names 2024-08-04 19:17:45 +02:00
.azure-pipelines.yml CI/azure: disable parallel tests, allow IDN tests 2024-08-19 14:09:14 +02:00
.dcignore copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
.dir-locals.el copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
.git-blame-ignore-revs copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
.gitattributes
.gitignore CHANGES: rename to CHANGES.md, no longer generated 2024-08-01 13:37:12 +02:00
.mailmap mailmap: dedupe an author showing up twice in shortlog -s 2024-07-30 14:25:30 +02:00
acinclude.m4 tidy-up: spelling 'built-in' 2024-08-20 21:32:40 +02:00
appveyor.sh cmake: show warning if libpsl is not found 2024-08-15 10:38:46 +02:00
appveyor.yml appveyor: drop uploading artifacts 2024-08-18 12:22:53 +02:00
buildconf
buildconf.bat buildconf.bat: remove outdated groff/nroff use 2024-03-07 22:38:16 +01:00
CHANGES.md CHANGES: rename to CHANGES.md, no longer generated 2024-08-01 13:37:12 +02:00
CMakeLists.txt cmake: tidy up option descriptions 2024-08-21 23:36:12 +02:00
configure.ac build: make CURL_FORMAT_CURL_OFF_T[U] work with mingw-w64 <=7.0.0 2024-08-22 10:45:04 +02:00
COPYING
curl-config.in build: tidy up internal macro names for libcurl.pc 2024-08-12 14:56:41 +02:00
Dockerfile
GIT-INFO.md
libcurl.def lib: add curl_multi_waitfds 2024-04-09 16:53:40 +02:00
libcurl.pc.in build: tidy up internal macro names for libcurl.pc 2024-08-12 14:56:41 +02:00
Makefile.am cmake: migrate dependency detections to Find modules 2024-08-20 11:38:40 +02:00
Makefile.dist Makefile.mk: drop Windows support 2023-12-16 13:12:22 +00:00
maketgz dist: drop buildconf 2024-08-06 13:43:20 +02:00
README
README.md
RELEASE-NOTES RELEASE-NOTES: synced 2024-08-22 09:44:54 +02:00
renovate.json
REUSE.toml CHANGES: rename to CHANGES.md, no longer generated 2024-08-01 13:37:12 +02:00
SECURITY.md docs: Clarify OpenSSF Best Practices vs Scorecard 2024-08-22 11:50:20 +02:00

curl logo

Curl is a command-line tool for transferring data specified with URL syntax. Find out how to use curl by reading the curl.1 man page or the MANUAL document. Find out how to install Curl by reading the INSTALL document.

libcurl is the library curl is using to do its job. It is readily available to be used by your software. Read the libcurl.3 man page to learn how.

You can find answers to the most frequent questions we get in the FAQ document.

Study the COPYING file for distribution terms.

Contact

If you have problems, questions, ideas or suggestions, please contact us by posting to a suitable mailing list.

All contributors to the project are listed in the THANKS document.

Commercial support

For commercial support, maybe private and dedicated help with your problems or applications using (lib)curl visit the support page.

Website

Visit the curl website for the latest news and downloads.

Git

To download the latest source from the Git server, do this:

git clone https://github.com/curl/curl.git

(you will get a directory named curl created, filled with the source code)

Security problems

Report suspected security problems via our HackerOne page and not in public.

Notice

Curl contains pieces of source code that is Copyright (c) 1998, 1999 Kungliga Tekniska Högskolan. This notice is included here to comply with the distribution terms.

Backers

Thank you to all our backers! 🙏 Become a backer.

Sponsors

Support this project by becoming a sponsor.