diff --git a/docs/best-practice-non-memory-safe-by-default-languages.md b/docs/best-practice-non-memory-safe-by-default-languages.md new file mode 100644 index 0000000..20b92fb --- /dev/null +++ b/docs/best-practice-non-memory-safe-by-default-languages.md @@ -0,0 +1,13 @@ +# Best Practices - Non Memory-Safe By Default Languages + +This working group recommends using a memory-safe by default language whenever possible or practical. However, when using a memory-safe by default language is not possible or practical, there are developer practices that will improve memory safety, even if it is not the default. + +## C + +* [Scope-based resource management for the kernel](https://lwn.net/Articles/934679/) + +## C++ + +* [Making C++ Memory-Safe Without Borrow Checking, Reference Counting, or Tracing Garbage Collection](https://verdagon.dev/blog/vale-memory-safe-cpp) +* [C++ Core Guidelines](https://github.com/isocpp/CppCoreGuidelines) +* [C/C++ Hardening Guide](https://github.com/ossf/wg-best-practices-os-developers/tree/main/docs/Compiler-Hardening-Guides) diff --git a/docs/funding-recommendations.md b/docs/funding-recommendations.md new file mode 100644 index 0000000..fe85036 --- /dev/null +++ b/docs/funding-recommendations.md @@ -0,0 +1,11 @@ +# Funding recommendations + +This document captures initiatives this working group recommends that the OpenSSF and its members fund. + +## Evaluation Criteria + +TODO + +## Initiatives we have evaluated and recommend + +## Initiatives we are currently evaluating