ossf / ossf/security-baseline

Add threats to catalog

Open
#409 2 comments 0 reactions 1 assignee View on GitHub

@eddie-knight is already working on this.

Since Oct 14, 2025.

enhancement
Dominant language
Go
Stars
166
Forks
44
Avg merge
1d 7h
Merged PRs (30d)
13

Description

Similar to the FINOS Common Cloud Controls, we should add a catalog of threats that we tie Baseline controls to. From there, we can validate the applicability of controls, including controls that are missing, extraneous, or misaligned.

(Assigning to Eddie for overall coordination, but there's a lot of work to share among the team)

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.