You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| Best Practices Guides | Longer reference documents on implementing specific secure techniques | - [Compiler Annotations for C and C++ (incubating)](https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Annotations-for-C-and-C++.html), </p> - [Compiler Options Hardening Guide for C and C++](https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++), </p> - [Existing Guidelines for Developing and Distributing Secure Software](https://github.com/ossf/wg-best-practices-os-developers/blob/main/docs/Existing%20Guidelines%20for%20Developing%20and%20Distributing%20Secure%20Software.md), </p> - [Package Manager Best Practices (incubating)](https://github.com/ossf/package-manager-best-practices), </p> - [npm Best Practices Guide](https://github.com/ossf/package-manager-best-practices/blob/main/published/npm.md), </p> - [Source Code Management Platform Configuration Best Practices](docs/SCM-BestPractices/README.md), </p> - [Secure Coding Guide for Python](https://github.com/ossf/wg-best-practices-os-developers/tree/main/docs/Secure-Coding-Guide-for-Python), | - [#wg-best-practices-compilers](https://openssf.slack.com/archives/C07LH7RH8MT), </p> - [#wg-best-practices-scm](https://openssf.slack.com/archives/C058EC1EZ5Y) | |
80
80
| Concise Guides SIGs | Quick Guidance around Open Source Software Develpment Good Practices | - [Concise Guide for Developing More Secure Software](https://best.openssf.org/Concise-Guide-for-Developing-More-Secure-Software), </p> - [Concise Guide for Evaluating Open Source Software](https://best.openssf.org/Concise-Guide-for-Evaluating-Open-Source-Software)||[Mailing List](https://lists.openssf.org/g/openssf-wg-best-practices)|
81
-
| Education SIG - (incubating) | To provide industry standard secure software development training materials that will educate learners of all levels and backgrounds on how to create, compose, deploy, and maintain software securely using best practices in cyber and application security. |[EDU.SIG](https://github.com/ossf/education/)|[stream-01-security-education](https://openssf.slack.com/archives/C03FW3YGXH9)|[Mailing List](https://lists.openssf.org/g/openssf-sig-education)|
82
-
|[OpenSSF Best Practices Badge - formerly CII Best Practices badge](https://www.bestpractices.dev/)| Identifies FLOSS best practices & implements a badging system for those practices, ||||
81
+
| Education SIG - (incubating) | To provide industry standard secure software development training materials that will educate learners of all levels and backgrounds on how to create, compose, deploy, and maintain software securely using best practices in cyber and application security. |[EDU.SIG](https://github.com/ossf/education/)(course links are there)|[stream-01-security-education](https://openssf.slack.com/archives/C03FW3YGXH9)|[Mailing List](https://lists.openssf.org/g/openssf-sig-education)|
82
+
|[OpenSSF Best Practices Badge - formerly CII Best Practices badge](https://www.bestpractices.dev/)| Identifies FLOSS best practices & implements a badging system for those practices, |[best-practices-badge](https://github.com/coreinfrastructure/best-practices-badge)|||
83
83
|[OpenSSF Scorecard](https://scorecard.dev/)| Automate analysis on the security posture of open source projects |[OpenSSF Scorecard](https://github.com/ossf/scorecard)|[#scorecard](https://openssf.slack.com/archives/C0235AR8N2C)|[Contribute!](https://github.com/ossf/scorecard?tab=readme-ov-file#contribute)|
84
84
|[OpenSSF Scorecard — Allstar](https://github.com/ossf/allstar)| Monitors GitHub organizations or repositories for adherence to security best practices |[Allstar](https://github.com/ossf/allstar)|[#allstar](https://openssf.slack.com/archives/C02UQ2RL0HM)|[Contribute!](https://github.com/ossf/scorecard?tab=readme-ov-file#contribute)|
85
85
|[OpenSSF Security Baseline](https://github.com/ossf/security-baseline)| Provide avenue for particpants to help evolve the OpenSSF security baseline into a security baseline that can be applied to a broad range of software-based projects |[OpenSSF Security Baseline](https://github.com/ossf/security-baseline)|[#sig-security-baseline](https://app.slack.com/client/T019QHUBYQ3/C07DC6TT2QY)|[Mailing List](https://lists.openssf.org/g/openssf-sig-security-baseline)|
@@ -99,7 +99,7 @@ Our work is organized into several discrete-yet-related projects that help us ac
99
99
- Place where we want to guide developers in what stage they can use what type of tooling or approach. We have tons of great tools and materials but hard to find for devs, using this page and interactive loop we want to guide them to find the right stuff.
100
100
-_Great MFA Distribution Project_ - (archived) <https://github.com/ossf/great-mfa-project>
101
101
- Distribute MFA tokens to OSS developers and best practices on how to easily use them
102
-
-[Recommended compiler option flags for C/C++ programs](https://docs.google.com/document/d/1SslnJuqbFUyTFnhzkhC_Q3PPGZ1zrG89COrS6LV6pz4/edit#heading=h.b3casmpemf1b).
102
+
-[(Archived) Recommended compiler option flags for C/C++ programs](https://docs.google.com/document/d/1SslnJuqbFUyTFnhzkhC_Q3PPGZ1zrG89COrS6LV6pz4/edit#heading=h.b3casmpemf1b).
0 commit comments