ossf/security-baseline

View on GitHub

Stars: 166
Forks: 44
Open beginner issues: 0
Indexed issues: 38
Avg merge: 1d 7h
Merged PRs (30d): 13

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 8, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted

Beginner friendly Everything

Open All

38 open issues indexed

Release checklist still hand-edits version and draft state into the docs pages Open

Difficulty 3/5 1-2 days Newbie friendliness 75/100

ossf/security-baseline#551 · Opened Aug 31, 2026
Audit and split requirements combining multiple obligations Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

ossf/security-baseline#546 · Opened Aug 28, 2026
Tracking: legal (OSPS-LE) requirement decisions Open

criteria

Difficulty 5/5 Over a week Newbie friendliness 30/100

ossf/security-baseline#536 · Opened Aug 26, 2026
Define role of "standards owners" Open

documentation

ossf/security-baseline#511 · 4 comments · 3 assignees · Opened May 14, 2026
Enhance security guidelines for software supply chain Open

ossf/security-baseline#486 · 7 assignees · Opened Mar 17, 2026
OpenSSF Documentation Updates Open

ossf/security-baseline#454 · 1 assignee · Opened Dec 18, 2025
Review and potentially map OWASP SCVS to Baseline Open

criteria mappings

ossf/security-baseline#448 · 1 assignee · Opened Dec 4, 2025
Increase resolution of mapping applicability Open

criteria enhancement mappings

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/security-baseline#445 · 2 comments · 1 reaction · Opened Nov 26, 2025
Make explicit when a control builds on an earlier control Open

enhancement help wanted

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

ossf/security-baseline#423 · 2 comments · Opened Nov 16, 2025
"When the project has made a release" is confusing Open

bug criteria

ossf/security-baseline#422 · 1 comment · 1 assignee · Opened Nov 16, 2025
Help maintainers with answering questions as much as possible Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

ossf/security-baseline#421 · 4 comments · 1 reaction · Opened Nov 16, 2025
Add threats to catalog Open

enhancement

ossf/security-baseline#409 · 2 comments · 1 assignee · Opened Oct 14, 2025
Consider dropping legal requirements Open

blocked criteria

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/security-baseline#403 · 22 comments · Opened Oct 6, 2025
Proposal to add a packaging metdata license requirement Open

criteria

Difficulty 5/5 Over a week Newbie friendliness 30/100

ossf/security-baseline#401 · 1 comment · Opened Oct 3, 2025
Proposal to merge OSPS-LE-03.0* Open

criteria

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/security-baseline#400 · 1 comment · Opened Oct 3, 2025
Proposal to remove OSPS-LE-01.01 Open

criteria

Difficulty 5/5 Over a week Newbie friendliness 30/100

ossf/security-baseline#397 · 2 comments · Opened Oct 3, 2025
Clarify meaning of "standardized tooling" Open

bug criteria

Difficulty 3/5 1-2 days Newbie friendliness 35/100

ossf/security-baseline#393 · 1 reaction · Opened Sep 16, 2025
Add the crosswalk Matrix CSV to the website somewhere Open

enhancement mappings website

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

ossf/security-baseline#378 · Opened Aug 18, 2025
Mapping references for OSSF SCM Best Practices guide Open

mappings

Difficulty 3/5 1-2 days Newbie friendliness 45/100

ossf/security-baseline#377 · Opened Aug 15, 2025
Add a control for cryptography use Open

criteria enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

ossf/security-baseline#365 · Opened Jul 24, 2025
Create a control for incident response procedures Open

criteria enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

ossf/security-baseline#364 · Opened Jul 24, 2025
Add a control for logging/alerts/monitoring Open

criteria enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/security-baseline#363 · Opened Jul 24, 2025
Add a control for SDLC process Open

criteria enhancement

ossf/security-baseline#362 · 1 comment · 1 reaction · 1 assignee · Opened Jul 24, 2025
Control regarding fuzzing Open

criteria enhancement

Difficulty 5/5 Over a week Newbie friendliness 20/100

ossf/security-baseline#361 · Opened Jul 24, 2025
Create a control for review/maintenance/upkeep Open

criteria enhancement

Difficulty 5/5 Over a week Newbie friendliness 30/100

ossf/security-baseline#354 · Opened Jul 8, 2025
Create a control for a statement on supported use cases Open

criteria enhancement

ossf/security-baseline#353 · 1 assignee · Opened Jul 8, 2025
Add references page for control implementation Open

documentation enhancement website

ossf/security-baseline#351 · 1 reaction · 1 assignee · Opened Jul 8, 2025
Add CISA Software Acquisition Guide mappings to matrix Open

criteria mappings

ossf/security-baseline#337 · 1 assignee · Opened Jun 6, 2025
Write OpenSSF blog post on the value of OSPS to downstreams Open

ossf/security-baseline#319 · 2 assignees · Opened May 23, 2025
Write OpenSSF blog post on the value of OSPS to developers Open

ossf/security-baseline#318 · 2 assignees · Opened May 23, 2025
Add NIS2 mappings Open

criteria enhancement help wanted mappings question

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/security-baseline#316 · 1 comment · Opened May 22, 2025
Add DORA mappings Open

criteria enhancement mappings

ossf/security-baseline#315 · 1 assignee · Opened May 22, 2025
Design expression of Baseline conformance Open

documentation

ossf/security-baseline#274 · 5 comments · 1 assignee · Opened Apr 29, 2025
Resources for preparing a formal specification document Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 35/100

ossf/security-baseline#273 · 1 comment · 2 reactions · Opened Apr 29, 2025
[feedback] How can projects express they meet a given OSPS level? Open

question

ossf/security-baseline#257 · 8 comments · 1 assignee · Opened Apr 3, 2025
Add Root Cause Analysis to OSPS-VM-04 Open

criteria enhancement help wanted

Difficulty 3/5 1-2 days Newbie friendliness 48/100

ossf/security-baseline#243 · 8 comments · Opened Mar 11, 2025
Add preview on PR Open

documentation enhancement

ossf/security-baseline#222 · 1 reaction · 1 assignee · Opened Feb 25, 2025
Add criterion for CLI, filesystem, etc I/O Open

criteria enhancement help wanted

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/security-baseline#167 · Opened Jan 25, 2025

ossf/security-baseline

Get new issues in your inbox