From 4f77544a72793ad4814db1f605fec8277f0176d3 Mon Sep 17 00:00:00 2001 From: Dana Wang Date: Tue, 16 Jul 2024 20:09:14 -0500 Subject: [PATCH] Update process/security_baseline.md Co-authored-by: Marcela Melara Signed-off-by: Dana Wang --- process/security_baseline.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/process/security_baseline.md b/process/security_baseline.md index 50e34f2d..87d53252 100644 --- a/process/security_baseline.md +++ b/process/security_baseline.md @@ -73,8 +73,8 @@ To navigate these constraints, the following operating principles are adopted: ## Security Baseline As a software project progresses through the [OpenSSF technical initiative life cycle](https://github.com/ossf/tac/blob/main/process/project-lifecycle.md), it is beneficial to incrementally integrate more security measures. - * Sandbox stage - baseline awareness, and initial requirements - * Incubation stage - sandbox requirements plus additional baselines to sustain the secure project development and protect early adopters. + * Sandbox stage: Baseline awareness, and initial requirements + * Incubation stage: Sandbox requirements plus additional baselines to sustain the secure project development and protect early adopters. * Graduated stage: Incubation baseline plus additional baselines to prepare for its general availability and sustainability. This phased approach intends to support maintainers, contributors, and the community in innovating quickly with security built into the design or enabled by default.