Skip to content
This repository was archived by the owner on Jan 20, 2025. It is now read-only.

Commit cec1882

Browse files
github-actions[bot]github-actions[bot]
authored
chore: sync with dashboard database (#21)
1 parent f85b43b commit cec1882

File tree

73 files changed

+313
-312
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

73 files changed

+313
-312
lines changed

‎data/checks.json‎

Lines changed: 167 additions & 167 deletions
Large diffs are not rendered by default.

‎docs/details/MFAImpersonationDefense.mdx‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,6 @@ Use Multi Factor Authentication (MFA) Methods that Defend Against Impersonation
2525
- Mitre: [CWE-290](https://cwe.mitre.org/data/definitions/290.html)
2626
- Sources: [OpenSSF Best Practices Badge Gold Level [secure_2FA]](https://www.bestpractices.dev/en/criteria/2#2.secure_2FA)
2727
- How To: [Github Docs](https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa)
28-
- Created at 2024-12-07T23:06:38.197Z
29-
- Updated at 2024-12-07T23:06:38.197Z
28+
- Created at 2024-12-11T23:03:52.941Z
29+
- Updated at 2024-12-11T23:03:52.941Z
3030
<!-- DETAILS:END -->

‎docs/details/PRsBeforeMerge.mdx‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,6 @@ Require Pull Requests before Merging
2525
- Mitre: [CWE-778](https://cwe.mitre.org/data/definitions/778.html)
2626
- Sources: [OpenSSF Scorecard](https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection)
2727
- How To: [Github Docs](https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-pull-request-reviews-before-merging)
28-
- Created at 2024-12-07T23:06:38.197Z
29-
- Updated at 2024-12-07T23:06:38.197Z
28+
- Created at 2024-12-11T23:03:52.941Z
29+
- Updated at 2024-12-11T23:03:52.941Z
3030
<!-- DETAILS:END -->

‎docs/details/SSHKeysRequired.mdx‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,6 @@ Use SSH keys for developer access to source code repositories and use a passphra
2525
- Mitre: [CWE-309](https://cwe.mitre.org/data/definitions/309.html)
2626
- Sources: [CNCF SSCP v1.0 #192](https://github.com/cncf/tag-security/blob/main/supply-chain-security/supply-chain-security-paper/sscsp.md#use-ssh-keys-to-provide-developers-access-to-source-code-repositories)
2727
- How To: [Github Docs](https://docs.github.com/en/authentication/connecting-to-github-with-ssh/about-ssh)
28-
- Created at 2024-12-07T23:06:38.197Z
29-
- Updated at 2024-12-07T23:06:38.197Z
28+
- Created at 2024-12-11T23:03:52.941Z
29+
- Updated at 2024-12-11T23:03:52.941Z
3030
<!-- DETAILS:END -->

‎docs/details/activeAdminsSixMonths.mdx‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,6 @@ Github Organization Admins Should Have Activity In The Last 6 Months
2424
- Priority Group: R3
2525
- Mitre: [M1026](https://attack.mitre.org/mitigations/M1026/)
2626
- Sources: [OpenSSF SCM Best Practices](https://best.openssf.org/SCM-BestPractices/github/member/stale_admin_found.html)
27-
- Created at 2024-12-07T23:06:38.197Z
28-
- Updated at 2024-12-07T23:06:38.197Z
27+
- Created at 2024-12-11T23:03:52.941Z
28+
- Updated at 2024-12-11T23:03:52.941Z
2929
<!-- DETAILS:END -->

‎docs/details/activeWritersSixMonths.mdx‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,6 @@ Github Organization Members with Write Permissions Should Have Activity In The L
2424
- Priority Group: R3
2525
- Mitre: [M1026](https://attack.mitre.org/mitigations/M1026/)
2626
- Sources: [OpenSSF SCM Best Practices](https://best.openssf.org/SCM-BestPractices/github/member/stale_member_found.html)
27-
- Created at 2024-12-07T23:06:38.197Z
28-
- Updated at 2024-12-07T23:06:38.197Z
27+
- Created at 2024-12-11T23:03:52.941Z
28+
- Updated at 2024-12-11T23:03:52.941Z
2929
<!-- DETAILS:END -->

‎docs/details/adminRepoCreationOnly.mdx‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,6 @@ Only Admins Should Be Able To Create Public Repositories
2525
- Mitre: [CAPEC-122](https://capec.mitre.org/data/definitions/122.html)
2626
- Sources: [OpenSSF SCM Best Practices](https://best.openssf.org/SCM-BestPractices/github/organization/non_admins_can_create_public_repositories.html)
2727
- How To: [Github Docs](https://docs.github.com/en/organizations/managing-organization-settings/restricting-repository-creation-in-your-organization)
28-
- Created at 2024-12-07T23:06:38.197Z
29-
- Updated at 2024-12-07T23:06:38.197Z
28+
- Created at 2024-12-11T23:03:52.941Z
29+
- Updated at 2024-12-11T23:03:52.941Z
3030
<!-- DETAILS:END -->

‎docs/details/annualDependencyRefresh.mdx‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,6 @@ A new release to refresh dependencies occurs at least annually
2323
- C-SCRM: true
2424
- Priority Group: P14
2525
- Sources: [OpenSSF Best Practices Badge Passing Level [maintained]](https://www.bestpractices.dev/en/criteria?details=true&rationale=true#0.maintained)
26-
- Created at 2024-12-07T23:06:38.197Z
27-
- Updated at 2024-12-07T23:06:38.197Z
26+
- Created at 2024-12-11T23:03:52.941Z
27+
- Updated at 2024-12-11T23:03:52.941Z
2828
<!-- DETAILS:END -->

‎docs/details/assignCVEForKnownVulns.mdx‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,6 @@ All Known Security Vulnerabilities are Issued a CVE
2323
- C-SCRM: true
2424
- Priority Group: P7
2525
- Sources: [OpenSSF Best Practices Badge Passing Level [release_notes_vulns]](https://www.bestpractices.dev/en/criteria?details=true&rationale=true#0.release_notes_vulns)
26-
- Created at 2024-12-07T23:06:38.197Z
27-
- Updated at 2024-12-07T23:06:38.197Z
26+
- Created at 2024-12-11T23:03:52.941Z
27+
- Updated at 2024-12-11T23:03:52.941Z
2828
<!-- DETAILS:END -->

‎docs/details/automateDependencyManagement.mdx‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,6 @@ Automated Process is Used to Monitor for and Maintain a List of Out of Date Depe
2424
- Priority Group: P14
2525
- Sources: [OWASP SCVS L1 5.7](https://scvs.owasp.org/scvs/v5-component-analysis/)
2626
- How To: [Socket.Dev](https://socket.dev/)
27-
- Created at 2024-12-07T23:06:38.197Z
28-
- Updated at 2024-12-07T23:06:38.197Z
27+
- Created at 2024-12-11T23:03:52.941Z
28+
- Updated at 2024-12-11T23:03:52.941Z
2929
<!-- DETAILS:END -->

0 commit comments

Comments
 (0)