Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
27 commits
Select commit Hold shift + click to select a range
0805c5c
docs: add security guidelines and SECURITY.md template
morri-son Apr 7, 2026
52f0301
docs: improve practicality of security docs — make guidelines livable
morri-son Apr 7, 2026
1c43656
docs: relax supply chain resolution timelines to match project maturity
morri-son Apr 7, 2026
126fc35
docs: integrate PR feedback — add operational security controls, Open…
morri-son Apr 9, 2026
26a288d
docs: make vulnerability reporting platform-agnostic
morri-son Apr 15, 2026
b1df220
docs: add container image scanning and license compliance scanning se…
morri-son Apr 17, 2026
d500aa6
docs: align security guidelines with OpenSSF Security Baseline
morri-son Apr 17, 2026
e17382b
docs: trim implementation details, add SLA rationale and exemplary pr…
morri-son Apr 20, 2026
fed9e42
consolidate section 8, Revise introduction statement and point to Ope…
morri-son Apr 20, 2026
10fd2e2
add link to openssf Vulnerability Disclosure Guide
morri-son Apr 20, 2026
2c8fe3e
soften SLAs
morri-son Apr 21, 2026
d9ad1a6
docs: condense security guidelines from 513 to 300 lines
morri-son Apr 23, 2026
738d748
address PR review feedback from Skarlso
morri-son May 5, 2026
cd778f9
make push protection a MUST
morri-son May 5, 2026
0a7cb71
Update security-guidelines/security-guidelines.md
morri-son May 18, 2026
17cd17e
docs: clarify security guidelines scope is dev/build/release lifecycle
morrison-sap May 18, 2026
586951f
docs: spell out CVSS judgment criteria in §7
morrison-sap May 18, 2026
16ded9c
docs: tie SCA scan frequency and visibility to OpenSSF Baseline
morrison-sap May 18, 2026
beb161a
docs: anchor license allowlist to TSC + foundation licensing policy
morrison-sap May 18, 2026
6d143ad
docs: scope 2FA and deploy-key controls to SCM/CI/registry plane
morrison-sap May 18, 2026
7fd7483
docs: note Dependabot/Renovate update SHA-pinned actions automatically
morrison-sap May 18, 2026
23b616d
docs: anchor org owner count and clarify repo admin role in §9.5
morrison-sap May 18, 2026
9e1ff7e
docs: restructure maintainer vetting criteria into numbered list
morrison-sap May 18, 2026
bc9765b
docs: add threat-modelling references to §9.7
morrison-sap May 18, 2026
e8358a6
docs: clarify Resolution column reference date in §10
morrison-sap May 18, 2026
3671b89
docs: clarify multi-repo SECURITY.md fall-through (GitHub vs GitLab)
morrison-sap May 18, 2026
09b7980
docs: add EU Cyber Resilience Act (CRA) compliance requirements
morrison-sap Sep 14, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading