Skip to content

Commit c4e2823

Browse files
authored
Update wording to match definitions added in #375 (#388)
Signed-off-by: Ben Cotton <[email protected]>
1 parent df1a8ad commit c4e2823

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

baseline/OSPS-GV.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -260,13 +260,13 @@ controls:
260260
- id: OSPS-GV-04.01
261261
text: |
262262
While active, the project documentation MUST have a policy that code
263-
contributors are reviewed prior to granting escalated permissions to
263+
collaborators are reviewed prior to granting escalated permissions to
264264
sensitive resources.
265265
applicability:
266266
- Maturity Level 3
267267
recommendation: |
268268
Publish an enforceable policy in the project documentation that
269-
requires code contributors to be reviewed and approved before being
269+
requires code collaborators to be reviewed and approved before being
270270
granted escalated permissions to sensitive resources, such as merge
271271
approval or access to secrets. It is recommended that vetting includes
272272
establishing a justifiable lineage of identity such as confirming the

baseline/OSPS-QA.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -543,5 +543,5 @@ controls:
543543
Configure the project's version control system to require at least one
544544
non-author approval of changes before merging into the release or
545545
primary branch. This can be achieved by requiring a pull request to be
546-
reviewed and approved by at least one other contributor before it can
546+
reviewed and approved by at least one other collaborator before it can
547547
be merged.

0 commit comments

Comments
 (0)