Currently, all the baseline criteria are in baseline.yaml
; follow the structure
in the README when proposing new entries.
The baseline is published to https://baseline.openssf.org/ (via GitHub Pages) via
Jekyll (a static site generator) using scripts from ./cmd
and formatting from
./docs
, using GitHub Actions.
All changes to the repository should be made via PR (OSPS-AC-03). In addition to a clear title and descriptive commit message, PRs MUST meet the following criterion:
- DCO signoff (via
git commit -s
-- OSPS-LE-01) - All checks must pass (OSPS-QA-04)
See ./governance/GOVERNANCE.md for the process of achieving maintainer status on the project.