ossf/security-baseline issues and pull requests

#41 - Minimizing repository contents

Pull Request - State: open - Opened by eddie-knight 9 days ago
Labels: documentation

#40 - Flesh out provenance criteria

Issue - State: open - Opened by eddie-knight 9 days ago

#39 - Proposal for Baseline GH Rulesets Alignment w/ Minder

Issue - State: open - Opened by eddie-knight 9 days ago - 2 comments

#38 - Publish criteria to web

Issue - State: open - Opened by funnelfiasco 10 days ago - 1 comment

#37 - Scorecard probe for criteria: collaborator MFA required

Issue - State: closed - Opened by eddie-knight 21 days ago

#36 - Controls should be less prescriptive and less focused on specifics of Github, etc.

Issue - State: open - Opened by JustinCappos 22 days ago - 1 comment

#35 - added two new criteria

Pull Request - State: open - Opened by SecurityCRob 27 days ago
Labels: documentation, enhancement

#34 - Update baseline.md Criteria Table

Pull Request - State: open - Opened by SecurityCRob 27 days ago
Labels: documentation, enhancement

#33 - fix: clarify definition of a Collaborator

Pull Request - State: closed - Opened by madpah 27 days ago
Labels: documentation, enhancement

#32 - Potential gaps to address prior to intial release & implemenation

Issue - State: open - Opened by SecurityCRob 27 days ago - 3 comments
Labels: documentation, enhancement, help wanted

#31 - Adding entries for probes that already exist

Pull Request - State: closed - Opened by eddie-knight 29 days ago - 2 comments

#30 - Typofix

Pull Request - State: closed - Opened by eddie-knight about 1 month ago

#29 - Typofix

Pull Request - State: closed - Opened by eddie-knight about 1 month ago

#28 - Create members.md

Pull Request - State: closed - Opened by SecurityCRob about 1 month ago

#27 - Added IDs and details doc

Pull Request - State: closed - Opened by eddie-knight about 1 month ago

#26 - Added OSPS Lexicon w/ links from the Criteria

Pull Request - State: closed - Opened by eddie-knight about 1 month ago - 3 comments

#25 - Develop Scorecard Probes for Level 1 Criteria

Issue - State: open - Opened by eddie-knight about 1 month ago
Labels: good first issue, help wanted

#24 - Added initial criteria (Level 2 and 3 are known incomplete)

Pull Request - State: closed - Opened by eddie-knight about 1 month ago - 4 comments

#23 - Considerations for projects that dont fit modern repo management practices

Issue - State: open - Opened by TheFoxAtWork 3 months ago

#22 - Create proposal for threat to metric mapping format

Issue - State: open - Opened by eddie-knight 3 months ago

#21 - Update README.md to have bomctl as a pilot project

Pull Request - State: closed - Opened by Danajoyluck 4 months ago
Labels: documentation

#20 - Add SECURITY_INSIGHTS.yml starter file to ossf/project-template

Issue - State: open - Opened by Danajoyluck 4 months ago - 1 comment
Labels: enhancement

#19 - Add dependency policy to project-template

Issue - State: open - Opened by Danajoyluck 4 months ago
Labels: enhancement

#19 - Add dependency policy to project-template

Issue - State: open - Opened by Danajoyluck 4 months ago
Labels: enhancement

#18 - Enable GitHub 2FA at enterprise level

Issue - State: closed - Opened by Danajoyluck 4 months ago
Labels: enhancement

#18 - Enable GitHub 2FA at enterprise level

Issue - State: closed - Opened by Danajoyluck 4 months ago
Labels: enhancement

#17 - OpenSSF Technology Consumption Architecture for Dependency Management

Pull Request - State: closed - Opened by Danajoyluck 4 months ago - 4 comments
Labels: documentation