Merge pull request #10 from nellshamrell/add-placedholder-docs

adds initial docs around funding and best practices

docs/best-practice-non-memory-safe-by-default-languages.md

@@ -0,0 +1,13 @@
+# Best Practices - Non Memory-Safe By Default Languages
+
+This working group recommends using a memory-safe by default language whenever possible or practical. However, when using a memory-safe by default language is not possible or practical, there are developer practices that will improve memory safety, even if it is not the default.
+
+## C
+
+* [Scope-based resource management for the kernel](https://lwn.net/Articles/934679/)
+
+## C++
+
+* [Making C++ Memory-Safe Without Borrow Checking, Reference Counting, or Tracing Garbage Collection](https://verdagon.dev/blog/vale-memory-safe-cpp)
+* [C++ Core Guidelines](https://github.com/isocpp/CppCoreGuidelines)
+* [C/C++ Hardening Guide](https://github.com/ossf/wg-best-practices-os-developers/tree/main/docs/Compiler-Hardening-Guides)

docs/funding-recommendations.md

@@ -0,0 +1,11 @@
+# Funding recommendations
+
+This document captures initiatives this working group recommends that the OpenSSF and its members fund.
+
+## Evaluation Criteria
+
+TODO
+
+## Initiatives we have evaluated and recommend
+
+## Initiatives we are currently evaluating