Skip to content
This repository was archived by the owner on Jan 20, 2025. It is now read-only.

Commit 18dc946

Browse files
actions-userUlisesGascon
actions-user
authored and
UlisesGascon
committed
chore: auto-update content
1 parent e602ad0 commit 18dc946

File tree

72 files changed

+144
-144
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

72 files changed

+144
-144
lines changed

‎docs/details/MFAImpersonationDefense.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,6 @@ Use Multi Factor Authentication (MFA) Methods that Defend Against Impersonation
2525
- Mitre: [CWE-290](https://cwe.mitre.org/data/definitions/290.html)
2626
- Sources: [OpenSSF Best Practices Badge Gold Level [secure_2FA]](https://www.bestpractices.dev/en/criteria/2#2.secure_2FA)
2727
- How To: [Github Docs](https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa)
28-
- Created at 2024-12-11T23:03:52.941Z
29-
- Updated at 2024-12-11T23:03:52.941Z
28+
- Created at 2024-12-18T20:19:27.410Z
29+
- Updated at 2024-12-18T20:19:27.410Z
3030
<!-- DETAILS:END -->

‎docs/details/PRsBeforeMerge.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,6 @@ Require Pull Requests before Merging
2525
- Mitre: [CWE-778](https://cwe.mitre.org/data/definitions/778.html)
2626
- Sources: [OpenSSF Scorecard](https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection)
2727
- How To: [Github Docs](https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-pull-request-reviews-before-merging)
28-
- Created at 2024-12-11T23:03:52.941Z
29-
- Updated at 2024-12-11T23:03:52.941Z
28+
- Created at 2024-12-18T20:19:27.410Z
29+
- Updated at 2024-12-18T20:19:27.410Z
3030
<!-- DETAILS:END -->

‎docs/details/SSHKeysRequired.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,6 @@ Use SSH keys for developer access to source code repositories and use a passphra
2525
- Mitre: [CWE-309](https://cwe.mitre.org/data/definitions/309.html)
2626
- Sources: [CNCF SSCP v1.0 #192](https://github.com/cncf/tag-security/blob/main/supply-chain-security/supply-chain-security-paper/sscsp.md#use-ssh-keys-to-provide-developers-access-to-source-code-repositories)
2727
- How To: [Github Docs](https://docs.github.com/en/authentication/connecting-to-github-with-ssh/about-ssh)
28-
- Created at 2024-12-11T23:03:52.941Z
29-
- Updated at 2024-12-11T23:03:52.941Z
28+
- Created at 2024-12-18T20:19:27.410Z
29+
- Updated at 2024-12-18T20:19:27.410Z
3030
<!-- DETAILS:END -->

‎docs/details/activeAdminsSixMonths.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,6 @@ Github Organization Admins Should Have Activity In The Last 6 Months
2424
- Priority Group: R3
2525
- Mitre: [M1026](https://attack.mitre.org/mitigations/M1026/)
2626
- Sources: [OpenSSF SCM Best Practices](https://best.openssf.org/SCM-BestPractices/github/member/stale_admin_found.html)
27-
- Created at 2024-12-11T23:03:52.941Z
28-
- Updated at 2024-12-11T23:03:52.941Z
27+
- Created at 2024-12-18T20:19:27.410Z
28+
- Updated at 2024-12-18T20:19:27.410Z
2929
<!-- DETAILS:END -->

‎docs/details/activeWritersSixMonths.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,6 @@ Github Organization Members with Write Permissions Should Have Activity In The L
2424
- Priority Group: R3
2525
- Mitre: [M1026](https://attack.mitre.org/mitigations/M1026/)
2626
- Sources: [OpenSSF SCM Best Practices](https://best.openssf.org/SCM-BestPractices/github/member/stale_member_found.html)
27-
- Created at 2024-12-11T23:03:52.941Z
28-
- Updated at 2024-12-11T23:03:52.941Z
27+
- Created at 2024-12-18T20:19:27.410Z
28+
- Updated at 2024-12-18T20:19:27.410Z
2929
<!-- DETAILS:END -->

‎docs/details/adminRepoCreationOnly.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,6 @@ Only Admins Should Be Able To Create Public Repositories
2525
- Mitre: [CAPEC-122](https://capec.mitre.org/data/definitions/122.html)
2626
- Sources: [OpenSSF SCM Best Practices](https://best.openssf.org/SCM-BestPractices/github/organization/non_admins_can_create_public_repositories.html)
2727
- How To: [Github Docs](https://docs.github.com/en/organizations/managing-organization-settings/restricting-repository-creation-in-your-organization)
28-
- Created at 2024-12-11T23:03:52.941Z
29-
- Updated at 2024-12-11T23:03:52.941Z
28+
- Created at 2024-12-18T20:19:27.410Z
29+
- Updated at 2024-12-18T20:19:27.410Z
3030
<!-- DETAILS:END -->

‎docs/details/annualDependencyRefresh.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,6 @@ A new release to refresh dependencies occurs at least annually
2323
- C-SCRM: true
2424
- Priority Group: P14
2525
- Sources: [OpenSSF Best Practices Badge Passing Level [maintained]](https://www.bestpractices.dev/en/criteria?details=true&rationale=true#0.maintained)
26-
- Created at 2024-12-11T23:03:52.941Z
27-
- Updated at 2024-12-11T23:03:52.941Z
26+
- Created at 2024-12-18T20:19:27.410Z
27+
- Updated at 2024-12-18T20:19:27.410Z
2828
<!-- DETAILS:END -->

‎docs/details/assignCVEForKnownVulns.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,6 @@ All Known Security Vulnerabilities are Issued a CVE
2323
- C-SCRM: true
2424
- Priority Group: P7
2525
- Sources: [OpenSSF Best Practices Badge Passing Level [release_notes_vulns]](https://www.bestpractices.dev/en/criteria?details=true&rationale=true#0.release_notes_vulns)
26-
- Created at 2024-12-11T23:03:52.941Z
27-
- Updated at 2024-12-11T23:03:52.941Z
26+
- Created at 2024-12-18T20:19:27.410Z
27+
- Updated at 2024-12-18T20:19:27.410Z
2828
<!-- DETAILS:END -->

‎docs/details/automateDependencyManagement.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,6 @@ Automated Process is Used to Monitor for and Maintain a List of Out of Date Depe
2424
- Priority Group: P14
2525
- Sources: [OWASP SCVS L1 5.7](https://scvs.owasp.org/scvs/v5-component-analysis/)
2626
- How To: [Socket.Dev](https://socket.dev/)
27-
- Created at 2024-12-11T23:03:52.941Z
28-
- Updated at 2024-12-11T23:03:52.941Z
27+
- Created at 2024-12-18T20:19:27.410Z
28+
- Updated at 2024-12-18T20:19:27.410Z
2929
<!-- DETAILS:END -->

‎docs/details/automateVulnDetection.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,6 @@ An automated process to identify dependencies with publicly disclosed vulnerabil
2525
- Mitre: [CWE-1395](https://cwe.mitre.org/data/definitions/1395.html)
2626
- Sources: [OWASP SCVS L1 5.4](https://scvs.owasp.org/scvs/v5-component-analysis/)
2727
- How To: [Github Docs](https://docs.github.com/en/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates#managing-dependabot-security-updates-for-your-repositories)
28-
- Created at 2024-12-11T23:03:52.941Z
29-
- Updated at 2024-12-11T23:03:52.941Z
28+
- Created at 2024-12-18T20:19:27.410Z
29+
- Updated at 2024-12-18T20:19:27.410Z
3030
<!-- DETAILS:END -->

0 commit comments

Comments
 (0)