Skip to content

add openssf badge to new security page #6057

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Oct 28, 2023
Merged

add openssf badge to new security page #6057

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
70190ad
add openssf badge to new security page
bmuenzenmeyer Oct 27, 2023
1c58f58
fix: overeager global padding avoided
bmuenzenmeyer Oct 28, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions pages/en/about/security-reporting.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -72,3 +72,9 @@ Security notifications will be distributed via the following methods.
If you have suggestions on how this process could be improved please submit a
[pull request](https://github.com/nodejs/nodejs.org) or
[file an issue](https://github.com/nodejs/security-wg/issues/new) to discuss.

## OpenSSF Best Practices

<a href="https://bestpractices.coreinfrastructure.org/projects/29" style="display: inline;"><img src="https://bestpractices.coreinfrastructure.org/projects/29/badge" style="display: inline;"></a>

The Open Source Security Foundation (OpenSSF) [Best Practices badge](https://github.com/coreinfrastructure/best-practices-badge) is a way for Free/Libre and Open Source Software (FLOSS) projects to show that they follow best practices. Projects can voluntarily self-certify how they follow each best practice. Consumers of the badge can quickly assess which FLOSS projects are following best practices and as a result are more likely to produce higher-quality secure software.