Skip to content

Commit d3755be

Browse files
authored
Update chains-repo-checklist.md
1 parent 87572df commit d3755be

File tree

1 file changed

+4
-5
lines changed

1 file changed

+4
-5
lines changed

chains-repo-checklist.md

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -4,12 +4,10 @@ title: CHAINS Software Supply Chain Competition
44

55
This is a competition based on a checklist for best practices in software supply chain security.
66

7-
At the 2025 workshop, a leaderboard will be announced and the participant with the highest score will score will receive a prize.
8-
97
Name: ______________
108
Repo: ______________
119

12-
| Rule | Check ✅/❌|
10+
| Rule | Check ✅|
1311
|----------|----------|
1412
| forbid unsigned git commits and tags (impossible to do on Github)| |
1513
| forbid transient dependencies in CI (no latest, SNAPSHOT, etc.) | |
@@ -23,6 +21,7 @@ Repo: ______________
2321
| automated creation of SBOMs for releases | |
2422
| push build attestations for releases (rekor) | |
2523
| have independent rebuilders (reproducible-central) | |
26-
| use branch, tag and CI protection rules | |
24+
| use branch / tag protection rules | |
2725
| verify dependency crypto signatures from a trusted source | |
28-
| have 2FA enabled for all repo members | |
26+
| have 2FA enabled for all project members | |
27+
| Total score | |

0 commit comments

Comments
 (0)