Skip to content

Commit 9cc102d

Browse files
chore: sync policies, checks and checklists (#41)
Co-authored-by: GitHub Actions <actions@github.com>
1 parent ff36b9a commit 9cc102d

9 files changed

+914
-935
lines changed

data/checklists.json

Lines changed: 742 additions & 742 deletions
Large diffs are not rendered by default.

data/checks.json

Lines changed: 165 additions & 165 deletions
Large diffs are not rendered by default.

docs/checks/annualDependencyRefresh.mdx

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,11 +6,7 @@ slug: /checks/annualDependencyRefresh
66
---
77

88
<!-- BANNER:START -->
9-
:::tip
109

11-
This check is currently under development and not yet implemented. [Click here to learn how you can help](/contribute).
12-
13-
:::
1410
<!-- BANNER:END -->
1511

1612
<!-- DESCRIPTION:START -->
@@ -26,6 +22,7 @@ We use the column `has_annualDependencyRefresh_policy` from the table `projects`
2622
## Details
2723
- Default Category: vulnerability management
2824
- Default Priority Group: P14
25+
- Implementation Details: It is manual ([details](https://github.com/OpenPathfinder/visionBoard/issues/112)).
2926
- C-SCRM: true
3027
- Sources: [OpenSSF Best Practices Badge Passing Level (maintained)](https://www.bestpractices.dev/en/criteria?details=true&rationale=true#0.maintained)
3128

docs/checks/injectedSecretsAtRuntime.mdx

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,11 +6,7 @@ slug: /checks/injectedSecretsAtRuntime
66
---
77

88
<!-- BANNER:START -->
9-
:::tip
109

11-
This check is currently under development and not yet implemented. [Click here to learn how you can help](/contribute).
12-
13-
:::
1410
<!-- BANNER:END -->
1511

1612
<!-- DESCRIPTION:START -->
@@ -26,6 +22,7 @@ We use the column `has_injectedSecretsAtRuntime_policy` from the table `projects
2622
## Details
2723
- Default Category: service authentication
2824
- Default Priority Group: P2
25+
- Implementation Details: It is manual ([details](https://github.com/OpenPathfinder/visionBoard/issues/68)).
2926
- C-SCRM: true
3027
- Mitre: [CWE-538](https://cwe.mitre.org/data/definitions/538.html)
3128
- Sources: [CNCF CNSWP 2.0 #195](https://github.com/cncf/tag-security/blob/main/security-whitepaper/v2/cloud-native-security-whitepaper.md#secrets-encryption)

docs/checks/patchCriticalVulns30Days.mdx

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,11 +6,7 @@ slug: /checks/patchCriticalVulns30Days
66
---
77

88
<!-- BANNER:START -->
9-
:::tip
109

11-
This check is currently under development and not yet implemented. [Click here to learn how you can help](/contribute).
12-
13-
:::
1410
<!-- BANNER:END -->
1511

1612
<!-- DESCRIPTION:START -->
@@ -26,6 +22,7 @@ We use the column `has_patchCriticalVulns30Days_policy` from the table `projects
2622
## Details
2723
- Default Category: vulnerability management
2824
- Default Priority Group: P5
25+
- Implementation Details: It is manual ([details](https://github.com/OpenPathfinder/visionBoard/issues/80)).
2926
- C-SCRM: false
3027
- Sources: [OpenSSF Best Practices Badge Passing Level (vulnerabilities_critical_fixed)](https://www.bestpractices.dev/en/criteria#0.vulnerabilities_critical_fixed)
3128
- Sources: [Google Project Zero Vulnerability Disclosure Policy](https://googleprojectzero.blogspot.com/p/vulnerability-disclosure-policy.html)

docs/checks/patchNonCriticalVulns90Days.mdx

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,11 +6,7 @@ slug: /checks/patchNonCriticalVulns90Days
66
---
77

88
<!-- BANNER:START -->
9-
:::tip
109

11-
This check is currently under development and not yet implemented. [Click here to learn how you can help](/contribute).
12-
13-
:::
1410
<!-- BANNER:END -->
1511

1612
<!-- DESCRIPTION:START -->
@@ -26,6 +22,7 @@ We use the column `has_patchNonCriticalVulns90Days_policy` from the table `proje
2622
## Details
2723
- Default Category: vulnerability management
2824
- Default Priority Group: P5
25+
- Implementation Details: It is manual ([details](https://github.com/OpenPathfinder/visionBoard/issues/81)).
2926
- C-SCRM: false
3027
- Sources: [Google Project Zero Vulnerability Disclosure Policy](https://googleprojectzero.blogspot.com/p/vulnerability-disclosure-policy.html)
3128

docs/checks/preventScriptInjection.mdx

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,11 +6,7 @@ slug: /checks/preventScriptInjection
66
---
77

88
<!-- BANNER:START -->
9-
:::tip
109

11-
This check is currently under development and not yet implemented. [Click here to learn how you can help](/contribute).
12-
13-
:::
1410
<!-- BANNER:END -->
1511

1612
<!-- DESCRIPTION:START -->
@@ -26,6 +22,7 @@ We use the column `has_preventScriptInjection_policy` from the table `projects`
2622
## Details
2723
- Default Category: github workflows
2824
- Default Priority Group: P11
25+
- Implementation Details: It is manual ([details](https://github.com/OpenPathfinder/visionBoard/issues/104)).
2926
- C-SCRM: true
3027
- Mitre: [CWE-454](https://cwe.mitre.org/data/definitions/454.html)
3128
- Mitre: [CAPEC-242](https://capec.mitre.org/data/definitions/242.html)

docs/checks/resolveLinterWarnings.mdx

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,11 +6,7 @@ slug: /checks/resolveLinterWarnings
66
---
77

88
<!-- BANNER:START -->
9-
:::tip
109

11-
This check is currently under development and not yet implemented. [Click here to learn how you can help](/contribute).
12-
13-
:::
1410
<!-- BANNER:END -->
1511

1612
<!-- DESCRIPTION:START -->
@@ -26,6 +22,7 @@ We use the column `has_resolveLinterWarnings_policy` from the table `projects` t
2622
## Details
2723
- Default Category: code quality
2824
- Default Priority Group: P6
25+
- Implementation Details: It is manual ([details](https://github.com/OpenPathfinder/visionBoard/issues/84)).
2926
- C-SCRM: false
3027
- Mitre: [CWE-1127](https://cwe.mitre.org/data/definitions/1127.html)
3128
- Sources: [OpenSSF Best Practices Badge Silver Level (warnings_strict)](https://www.bestpractices.dev/en/criteria?details=true&rationale=true#1.warnings_strict)

docs/checks/twoOrMoreOwnersForAccess.mdx

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,11 +6,7 @@ slug: /checks/twoOrMoreOwnersForAccess
66
---
77

88
<!-- BANNER:START -->
9-
:::tip
109

11-
This check is currently under development and not yet implemented. [Click here to learn how you can help](/contribute).
12-
13-
:::
1410
<!-- BANNER:END -->
1511

1612
<!-- DESCRIPTION:START -->
@@ -26,6 +22,7 @@ We use the column `has_twoOrMoreOwnersForAccess_policy` from the table `projects
2622
## Details
2723
- Default Category: user account permissions
2824
- Default Priority Group: P4
25+
- Implementation Details: It is manual ([details](https://github.com/OpenPathfinder/visionBoard/issues/79)).
2926
- C-SCRM: true
3027
- Mitre: [M1026](https://attack.mitre.org/mitigations/M1026/)
3128
- Sources: [OpenSSF Best Practices Badge Silver Level (access_continuity)](https://www.bestpractices.dev/en/criteria?details=true&rationale=true#1.access_continuity)

0 commit comments

Comments
 (0)