File tree Expand file tree Collapse file tree 9 files changed +914
-935
lines changed
Expand file tree Collapse file tree 9 files changed +914
-935
lines changed Load Diff Large diffs are not rendered by default.
Load Diff Large diffs are not rendered by default.
Original file line number Diff line number Diff line change @@ -6,11 +6,7 @@ slug: /checks/annualDependencyRefresh
66---
77
88<!-- BANNER :START -->
9- :::tip
109
11- This check is currently under development and not yet implemented. [Click here to learn how you can help](/contribute).
12-
13- :::
1410<!-- BANNER :END -->
1511
1612<!-- DESCRIPTION :START -->
@@ -26,6 +22,7 @@ We use the column `has_annualDependencyRefresh_policy` from the table `projects`
2622## Details
2723- Default Category: vulnerability management
2824- Default Priority Group: P14
25+ - Implementation Details: It is manual ([details](https://github.com/OpenPathfinder/visionBoard/issues/112)).
2926- C-SCRM: true
3027- Sources: [OpenSSF Best Practices Badge Passing Level (maintained)](https://www.bestpractices.dev/en/criteria?details=true&rationale=true#0.maintained)
3128
Original file line number Diff line number Diff line change @@ -6,11 +6,7 @@ slug: /checks/injectedSecretsAtRuntime
66---
77
88<!-- BANNER :START -->
9- :::tip
109
11- This check is currently under development and not yet implemented. [Click here to learn how you can help](/contribute).
12-
13- :::
1410<!-- BANNER :END -->
1511
1612<!-- DESCRIPTION :START -->
@@ -26,6 +22,7 @@ We use the column `has_injectedSecretsAtRuntime_policy` from the table `projects
2622## Details
2723- Default Category: service authentication
2824- Default Priority Group: P2
25+ - Implementation Details: It is manual ([details](https://github.com/OpenPathfinder/visionBoard/issues/68)).
2926- C-SCRM: true
3027- Mitre: [CWE-538](https://cwe.mitre.org/data/definitions/538.html)
3128- Sources: [CNCF CNSWP 2.0 #195](https://github.com/cncf/tag-security/blob/main/security-whitepaper/v2/cloud-native-security-whitepaper.md#secrets-encryption)
Original file line number Diff line number Diff line change @@ -6,11 +6,7 @@ slug: /checks/patchCriticalVulns30Days
66---
77
88<!-- BANNER :START -->
9- :::tip
109
11- This check is currently under development and not yet implemented. [Click here to learn how you can help](/contribute).
12-
13- :::
1410<!-- BANNER :END -->
1511
1612<!-- DESCRIPTION :START -->
@@ -26,6 +22,7 @@ We use the column `has_patchCriticalVulns30Days_policy` from the table `projects
2622## Details
2723- Default Category: vulnerability management
2824- Default Priority Group: P5
25+ - Implementation Details: It is manual ([details](https://github.com/OpenPathfinder/visionBoard/issues/80)).
2926- C-SCRM: false
3027- Sources: [OpenSSF Best Practices Badge Passing Level (vulnerabilities_critical_fixed)](https://www.bestpractices.dev/en/criteria#0.vulnerabilities_critical_fixed)
3128- Sources: [Google Project Zero Vulnerability Disclosure Policy](https://googleprojectzero.blogspot.com/p/vulnerability-disclosure-policy.html)
Original file line number Diff line number Diff line change @@ -6,11 +6,7 @@ slug: /checks/patchNonCriticalVulns90Days
66---
77
88<!-- BANNER :START -->
9- :::tip
109
11- This check is currently under development and not yet implemented. [Click here to learn how you can help](/contribute).
12-
13- :::
1410<!-- BANNER :END -->
1511
1612<!-- DESCRIPTION :START -->
@@ -26,6 +22,7 @@ We use the column `has_patchNonCriticalVulns90Days_policy` from the table `proje
2622## Details
2723- Default Category: vulnerability management
2824- Default Priority Group: P5
25+ - Implementation Details: It is manual ([details](https://github.com/OpenPathfinder/visionBoard/issues/81)).
2926- C-SCRM: false
3027- Sources: [Google Project Zero Vulnerability Disclosure Policy](https://googleprojectzero.blogspot.com/p/vulnerability-disclosure-policy.html)
3128
Original file line number Diff line number Diff line change @@ -6,11 +6,7 @@ slug: /checks/preventScriptInjection
66---
77
88<!-- BANNER :START -->
9- :::tip
109
11- This check is currently under development and not yet implemented. [Click here to learn how you can help](/contribute).
12-
13- :::
1410<!-- BANNER :END -->
1511
1612<!-- DESCRIPTION :START -->
@@ -26,6 +22,7 @@ We use the column `has_preventScriptInjection_policy` from the table `projects`
2622## Details
2723- Default Category: github workflows
2824- Default Priority Group: P11
25+ - Implementation Details: It is manual ([details](https://github.com/OpenPathfinder/visionBoard/issues/104)).
2926- C-SCRM: true
3027- Mitre: [CWE-454](https://cwe.mitre.org/data/definitions/454.html)
3128- Mitre: [CAPEC-242](https://capec.mitre.org/data/definitions/242.html)
Original file line number Diff line number Diff line change @@ -6,11 +6,7 @@ slug: /checks/resolveLinterWarnings
66---
77
88<!-- BANNER :START -->
9- :::tip
109
11- This check is currently under development and not yet implemented. [Click here to learn how you can help](/contribute).
12-
13- :::
1410<!-- BANNER :END -->
1511
1612<!-- DESCRIPTION :START -->
@@ -26,6 +22,7 @@ We use the column `has_resolveLinterWarnings_policy` from the table `projects` t
2622## Details
2723- Default Category: code quality
2824- Default Priority Group: P6
25+ - Implementation Details: It is manual ([details](https://github.com/OpenPathfinder/visionBoard/issues/84)).
2926- C-SCRM: false
3027- Mitre: [CWE-1127](https://cwe.mitre.org/data/definitions/1127.html)
3128- Sources: [OpenSSF Best Practices Badge Silver Level (warnings_strict)](https://www.bestpractices.dev/en/criteria?details=true&rationale=true#1.warnings_strict)
Original file line number Diff line number Diff line change @@ -6,11 +6,7 @@ slug: /checks/twoOrMoreOwnersForAccess
66---
77
88<!-- BANNER :START -->
9- :::tip
109
11- This check is currently under development and not yet implemented. [Click here to learn how you can help](/contribute).
12-
13- :::
1410<!-- BANNER :END -->
1511
1612<!-- DESCRIPTION :START -->
@@ -26,6 +22,7 @@ We use the column `has_twoOrMoreOwnersForAccess_policy` from the table `projects
2622## Details
2723- Default Category: user account permissions
2824- Default Priority Group: P4
25+ - Implementation Details: It is manual ([details](https://github.com/OpenPathfinder/visionBoard/issues/79)).
2926- C-SCRM: true
3027- Mitre: [M1026](https://attack.mitre.org/mitigations/M1026/)
3128- Sources: [OpenSSF Best Practices Badge Silver Level (access_continuity)](https://www.bestpractices.dev/en/criteria?details=true&rationale=true#1.access_continuity)
You can’t perform that action at this time.
0 commit comments