loopbackio / security

[WORK IN PROGRESS] A centralised repository for all security-related matters on the LoopBack Project.
MIT License
4 stars 1 forks source link

Standards/specifications/guidance/recommendations to comply with #40

Open achrinza opened 4 days ago

achrinza commented 4 days ago

There's quite a few. This issue is to provide a consolidated list, and to discuss how we can uniformly show our compliance.

Name Category Issue
OSSF Security Insights 1.0 - https://github.com/loopbackio/security/issues/37
OSSF NPM Best Practives v1 - https://github.com/loopbackio/security/issues/33
OSSF Scorecards - https://github.com/loopbackio/security/issues/25
OSSF Best Practices - https://github.com/loopbackio/security/issues/21
OSSF Project Security Information Specification - https://github.com/loopbackio/security/issues/24
FIRST Guidelines and Practices for Multi-Party Vulnerability Coordination and Disclosure - https://github.com/loopbackio/security/issues/29
OpenJSF SBOM/S-SCRM Recommendations - https://github.com/loopbackio/security/issues/39