Skip to content

Commit

Permalink
Update TI-Gives+Gets.md
Browse files Browse the repository at this point in the history
more lining

Signed-off-by: CRob <[email protected]>
  • Loading branch information
SecurityCRob authored Nov 27, 2023
1 parent 0f00b4f commit 8a7eb68
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions process/TI-Gives+Gets.md
Original file line number Diff line number Diff line change
Expand Up @@ -30,8 +30,8 @@ In exchange for meeting certain requirements, the TIs are eligible to receive an
| TI must have documented, initial group governance. | With additional TAC or WG approval, may fundraise for dedicated project funds, coordinated by the OpenSSF. |
| Maintains a point of contact for vulnerability reports in the security.md | Receives support with vulnerability disclosure from the OpenSSF (Vulnerability Disclosure WG). |
| Implements, practices, and refines mature software development and release practices such as following a version schema. |
| TI Follows security best practices (as recommended by the OpenSSF and others), including passing the OpenSSF Best Practices criteria | |
| Project should be integrating with Scorecards | May post project updates and tutorials to the OpenSSF blog. | |
| TI Follows security best practices (as recommended by the OpenSSF and others), including passing the OpenSSF Best Practices criteria | May post project updates and tutorials to the OpenSSF blog. |
| Project should be integrating with Scorecards | |
| Begins to establish the appropriate governance that enables its sustainment for potential graduation.| |
| Projects should be Securing Code Repository -> Managing Contributions Commit Signing , Secret Scanning, Code Scanning (OSFUZZ at a minimum) + Self-assessment Should OpenSSF require these if the SCM supports it, especially using Sigstore? | |

Check failure on line 36 in process/TI-Gives+Gets.md

View workflow job for this annotation

GitHub Actions / Check Spelling

`OSFUZZ` is not a recognized word. (unrecognized-spelling)

Expand Down

0 comments on commit 8a7eb68

Please sign in to comment.