Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Getting OpenSSF security badge #3062

Closed
sedefsavas opened this issue Jan 6, 2022 · 2 comments · Fixed by #3260
Closed

Getting OpenSSF security badge #3062

sedefsavas opened this issue Jan 6, 2022 · 2 comments · Fixed by #3260
Assignees
Labels
area/security Issues or PRs related to security lifecycle/active Indicates that an issue or PR is actively being worked on by a contributor. priority/backlog Higher priority than priority/awaiting-more-evidence. triage/accepted Indicates an issue or PR is ready to be actively worked on.

Comments

@sedefsavas
Copy link
Contributor

OpenSSF provides a manual way of checking if projects follow the best practices in terms of security.
https://bestpractices.coreinfrastructure.org/en

It might be useful to do this to see CAPA's security posture, depending on the result we may do some improvements.

/area security
/priority backlog
/triage accepted

@k8s-ci-robot k8s-ci-robot added area/security Issues or PRs related to security priority/backlog Higher priority than priority/awaiting-more-evidence. triage/accepted Indicates an issue or PR is ready to be actively worked on. labels Jan 6, 2022
@sedefsavas sedefsavas added this to the Backlog milestone Jan 6, 2022
@Ankitasw
Copy link
Member

/assign

@Ankitasw
Copy link
Member

/lifecycle active

@k8s-ci-robot k8s-ci-robot added the lifecycle/active Indicates that an issue or PR is actively being worked on by a contributor. label Feb 28, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/security Issues or PRs related to security lifecycle/active Indicates that an issue or PR is actively being worked on by a contributor. priority/backlog Higher priority than priority/awaiting-more-evidence. triage/accepted Indicates an issue or PR is ready to be actively worked on.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants