File tree Expand file tree Collapse file tree 1 file changed +4
-5
lines changed
Expand file tree Collapse file tree 1 file changed +4
-5
lines changed Original file line number Diff line number Diff line change @@ -4,12 +4,10 @@ title: CHAINS Software Supply Chain Competition
44
55This is a competition based on a checklist for best practices in software supply chain security.
66
7- At the 2025 workshop, a leaderboard will be announced and the participant with the highest score will score will receive a prize.
8-
97Name: _____________ _
108Repo: _____________ _
119
12- | Rule | Check ✅/❌ |
10+ | Rule | Check ✅|
1311| ----------| ----------|
1412| forbid unsigned git commits and tags (impossible to do on Github)| |
1513| forbid transient dependencies in CI (no latest, SNAPSHOT, etc.) | |
@@ -23,6 +21,7 @@ Repo: ______________
2321| automated creation of SBOMs for releases | |
2422| push build attestations for releases (rekor) | |
2523| have independent rebuilders (reproducible-central) | |
26- | use branch, tag and CI protection rules | |
24+ | use branch / tag protection rules | |
2725| verify dependency crypto signatures from a trusted source | |
28- | have 2FA enabled for all repo members | |
26+ | have 2FA enabled for all project members | |
27+ | Total score | |
You can’t perform that action at this time.
0 commit comments