Skip to content
This repository was archived by the owner on Jan 20, 2025. It is now read-only.

Commit 0fc9a90

Browse files
committed
docs: update item details
1 parent 1942324 commit 0fc9a90

File tree

72 files changed

+433
-433
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

72 files changed

+433
-433
lines changed

docs/details/item-5.mdx docs/details/MFAImpersonationDefense.mdx

+6-6
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
sidebar_position: 6
3-
id: item-5
4-
title: Item-5
5-
slug: /details/item-5
3+
id: MFAImpersonationDefense
4+
title: Use MFA against impersonation
5+
slug: /details/MFAImpersonationDefense
66
---
77

8-
# Item-5
8+
# Use MFA against impersonation
99

1010
## Use Case
1111

@@ -19,8 +19,8 @@ Use Multi Factor Authentication (MFA) Methods that Defend Against Impersonation
1919

2020
## Details
2121

22-
- C-SCRM: undefined
23-
- Priority Group: 1
22+
- C-SCRM: Y
23+
- Priority Group: P1
2424
- Mitre: [CWE-290](https://cwe.mitre.org/data/definitions/290.html)
2525
- Sources: [OpenSSF Best Practices Badge Gold Level [secure_2FA]](https://www.bestpractices.dev/en/criteria/2#2.secure_2FA)
2626
- How To: [Github Docs](https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa)

docs/details/item-61.mdx docs/details/PRsBeforeMerge.mdx

+6-6
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
sidebar_position: 62
3-
id: item-61
4-
title: Item-61
5-
slug: /details/item-61
3+
id: PRsBeforeMerge
4+
title: Require Pull Requests Before Merging
5+
slug: /details/PRsBeforeMerge
66
---
77

8-
# Item-61
8+
# Require Pull Requests Before Merging
99

1010
## Use Case
1111

@@ -19,8 +19,8 @@ Require Pull Requests before Merging
1919

2020
## Details
2121

22-
- C-SCRM: undefined
23-
- Priority Group: Rec 4
22+
- C-SCRM: Y
23+
- Priority Group: R4
2424
- Mitre: [CWE-778](https://cwe.mitre.org/data/definitions/778.html)
2525
- Sources: [OpenSSF Scorecard](https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection)
2626
- How To: [Github Docs](https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-pull-request-reviews-before-merging)

docs/details/item-10.mdx docs/details/SSHKeysRequired.mdx

+6-6
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
sidebar_position: 11
3-
id: item-10
4-
title: Item-10
5-
slug: /details/item-10
3+
id: SSHKeysRequired
4+
title: Use SSH Keys with Passphrases for Repository Access
5+
slug: /details/SSHKeysRequired
66
---
77

8-
# Item-10
8+
# Use SSH Keys with Passphrases for Repository Access
99

1010
## Use Case
1111

@@ -19,8 +19,8 @@ Use SSH keys for developer access to source code repositories and use a passphra
1919

2020
## Details
2121

22-
- C-SCRM: undefined
23-
- Priority Group: 3
22+
- C-SCRM: Y
23+
- Priority Group: P3
2424
- Mitre: [CWE-309](https://cwe.mitre.org/data/definitions/309.html)
2525
- Sources: [CNCF SSCP v1.0 #192](https://github.com/cncf/tag-security/blob/main/supply-chain-security/supply-chain-security-paper/sscsp.md#use-ssh-keys-to-provide-developers-access-to-source-code-repositories)
2626
- How To: [Github Docs](https://docs.github.com/en/authentication/connecting-to-github-with-ssh/about-ssh)

docs/details/item-59.mdx docs/details/activeAdminsSixMonths.mdx

+6-6
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
sidebar_position: 60
3-
id: item-59
4-
title: Item-59
5-
slug: /details/item-59
3+
id: activeAdminsSixMonths
4+
title: Require Active Admins in GitHub Org (Activity in 6 Months)
5+
slug: /details/activeAdminsSixMonths
66
---
77

8-
# Item-59
8+
# Require Active Admins in GitHub Org (Activity in 6 Months)
99

1010
## Use Case
1111

@@ -19,8 +19,8 @@ Github Organization Admins Should Have Activity In The Last 6 Months
1919

2020
## Details
2121

22-
- C-SCRM: undefined
23-
- Priority Group: Rec 3
22+
- C-SCRM: Y
23+
- Priority Group: R3
2424
- Mitre: [M1026](https://attack.mitre.org/mitigations/M1026/)
2525
- Sources: [OpenSSF SCM Best Practices](https://best.openssf.org/SCM-BestPractices/github/member/stale_admin_found.html)
2626
- How To:

docs/details/item-60.mdx docs/details/activeWritersSixMonths.mdx

+6-6
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
sidebar_position: 61
3-
id: item-60
4-
title: Item-60
5-
slug: /details/item-60
3+
id: activeWritersSixMonths
4+
title: Require Active Members with Write Access (Activity in 6 Months)
5+
slug: /details/activeWritersSixMonths
66
---
77

8-
# Item-60
8+
# Require Active Members with Write Access (Activity in 6 Months)
99

1010
## Use Case
1111

@@ -19,8 +19,8 @@ Github Organization Members with Write Permissions Should Have Activity In The L
1919

2020
## Details
2121

22-
- C-SCRM: undefined
23-
- Priority Group: Rec 3
22+
- C-SCRM: Y
23+
- Priority Group: R3
2424
- Mitre: [M1026](https://attack.mitre.org/mitigations/M1026/)
2525
- Sources: [OpenSSF SCM Best Practices](https://best.openssf.org/SCM-BestPractices/github/member/stale_member_found.html)
2626
- How To:

docs/details/item-14.mdx docs/details/adminRepoCreationOnly.mdx

+6-6
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
sidebar_position: 15
3-
id: item-14
4-
title: Item-14
5-
slug: /details/item-14
3+
id: adminRepoCreationOnly
4+
title: Allow Only Admins to Create Public Repositories
5+
slug: /details/adminRepoCreationOnly
66
---
77

8-
# Item-14
8+
# Allow Only Admins to Create Public Repositories
99

1010
## Use Case
1111

@@ -19,8 +19,8 @@ Only Admins Should Be Able To Create Public Repositories
1919

2020
## Details
2121

22-
- C-SCRM: undefined
23-
- Priority Group: 4
22+
- C-SCRM: Y
23+
- Priority Group: P4
2424
- Mitre: [CAPEC-122](https://capec.mitre.org/data/definitions/122.html)
2525
- Sources: [OpenSSF SCM Best Practices](https://best.openssf.org/SCM-BestPractices/github/organization/non_admins_can_create_public_repositories.html)
2626
- How To: [Github Docs](https://docs.github.com/en/organizations/managing-organization-settings/restricting-repository-creation-in-your-organization)

docs/details/item-52.mdx docs/details/annualDependencyRefresh.mdx

+6-6
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
sidebar_position: 53
3-
id: item-52
4-
title: Item-52
5-
slug: /details/item-52
3+
id: annualDependencyRefresh
4+
title: Refresh Dependencies with Annual Releases
5+
slug: /details/annualDependencyRefresh
66
---
77

8-
# Item-52
8+
# Refresh Dependencies with Annual Releases
99

1010
## Use Case
1111

@@ -19,8 +19,8 @@ A new release to refresh dependencies occurs at least annually
1919

2020
## Details
2121

22-
- C-SCRM: undefined
23-
- Priority Group: 14
22+
- C-SCRM: Y
23+
- Priority Group: P14
2424
- Mitre:
2525
- Sources: [OpenSSF Best Practices Badge Passing Level [maintained]](https://www.bestpractices.dev/en/criteria?details=true&rationale=true#0.maintained)
2626
- How To:

docs/details/item-30.mdx docs/details/assignCVEForKnownVulns.mdx

+6-6
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
sidebar_position: 31
3-
id: item-30
4-
title: Item-30
5-
slug: /details/item-30
3+
id: assignCVEForKnownVulns
4+
title: Assign CVEs to All Known Security Vulnerabilities
5+
slug: /details/assignCVEForKnownVulns
66
---
77

8-
# Item-30
8+
# Assign CVEs to All Known Security Vulnerabilities
99

1010
## Use Case
1111

@@ -19,8 +19,8 @@ All Known Security Vulnerabilities are Issued a CVE
1919

2020
## Details
2121

22-
- C-SCRM: undefined
23-
- Priority Group: 7
22+
- C-SCRM: Y
23+
- Priority Group: P7
2424
- Mitre:
2525
- Sources: [OpenSSF Best Practices Badge Passing Level [release_notes_vulns]](https://www.bestpractices.dev/en/criteria?details=true&rationale=true#0.release_notes_vulns)
2626
- How To:

docs/details/item-49.mdx docs/details/automateDependencyManagement.mdx

+6-6
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
sidebar_position: 50
3-
id: item-49
4-
title: Item-49
5-
slug: /details/item-49
3+
id: automateDependencyManagement
4+
title: Automate Monitoring of Outdated Dependencies
5+
slug: /details/automateDependencyManagement
66
---
77

8-
# Item-49
8+
# Automate Monitoring of Outdated Dependencies
99

1010
## Use Case
1111

@@ -19,8 +19,8 @@ Automated Process is Used to Monitor for and Maintain a List of Out of Date Depe
1919

2020
## Details
2121

22-
- C-SCRM: undefined
23-
- Priority Group: 14
22+
- C-SCRM: Y
23+
- Priority Group: P14
2424
- Mitre:
2525
- Sources: [OWASP SCVS L1 5.7](https://scvs.owasp.org/scvs/v5-component-analysis/)
2626
- How To: [Socket.Dev](https://socket.dev/)

docs/details/item-21.mdx docs/details/automateVulnDetection.mdx

+6-6
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
sidebar_position: 22
3-
id: item-21
4-
title: Item-21
5-
slug: /details/item-21
3+
id: automateVulnDetection
4+
title: Automate Dependency Vulnerability Identification
5+
slug: /details/automateVulnDetection
66
---
77

8-
# Item-21
8+
# Automate Dependency Vulnerability Identification
99

1010
## Use Case
1111

@@ -19,8 +19,8 @@ An automated process to identify dependencies with publicly disclosed vulnerabil
1919

2020
## Details
2121

22-
- C-SCRM: undefined
23-
- Priority Group: 6
22+
- C-SCRM: Y
23+
- Priority Group: P6
2424
- Mitre: [CWE-1395](https://cwe.mitre.org/data/definitions/1395.html)
2525
- Sources: [OWASP SCVS L1 5.4](https://scvs.owasp.org/scvs/v5-component-analysis/)
2626
- How To: [Github Docs](https://docs.github.com/en/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates#managing-dependabot-security-updates-for-your-repositories)

docs/details/item-34.mdx docs/details/blockWorkflowPRApproval.mdx

+6-6
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
sidebar_position: 35
3-
id: item-34
4-
title: Item-34
5-
slug: /details/item-34
3+
id: blockWorkflowPRApproval
4+
title: Prevent Workflows from Creating or Approving PRs
5+
slug: /details/blockWorkflowPRApproval
66
---
77

8-
# Item-34
8+
# Prevent Workflows from Creating or Approving PRs
99

1010
## Use Case
1111

@@ -19,8 +19,8 @@ Workflows are not Allowed To Create or Approve Pull Requests
1919

2020
## Details
2121

22-
- C-SCRM: undefined
23-
- Priority Group: 9
22+
- C-SCRM: Y
23+
- Priority Group: P9
2424
- Mitre: [CWE-250](https://cwe.mitre.org/data/definitions/250.html)
2525
- Sources: [OpenSSF Scorecard](https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions)
2626
- How To: [Github Docs](https://docs.github.com/en/enterprise-cloud@latest/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#preventing-github-actions-from-creating-or-approving-pull-requests)

docs/details/item-47.mdx docs/details/ciAndCdPipelineAsCode.mdx

+6-6
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
sidebar_position: 48
3-
id: item-47
4-
title: Item-47
5-
slug: /details/item-47
3+
id: ciAndCdPipelineAsCode
4+
title: Automate CI/CD Steps in Code-Based Pipelines
5+
slug: /details/ciAndCdPipelineAsCode
66
---
77

8-
# Item-47
8+
# Automate CI/CD Steps in Code-Based Pipelines
99

1010
## Use Case
1111

@@ -19,8 +19,8 @@ CI/CD steps should all be automated through a pipeline defined as code
1919

2020
## Details
2121

22-
- C-SCRM: undefined
23-
- Priority Group: 12
22+
- C-SCRM: Y
23+
- Priority Group: P12
2424
- Mitre:
2525
- Sources: [CNCF SSCP 1.0 #158](https://github.com/cncf/tag-security/blob/main/supply-chain-security/supply-chain-security-paper/sscsp.md#build-and-related-continuous-integrationcontinuous-delivery-steps-should-all-be-automated-through-a-pipeline-defined-as-code)
2626
- How To: [Github Docs](https://docs.github.com/en/actions/publishing-packages/publishing-nodejs-packages)

docs/details/item-62.mdx docs/details/commitSignoffForWeb.mdx

+6-6
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
sidebar_position: 63
3-
id: item-62
4-
title: Item-62
5-
slug: /details/item-62
3+
id: commitSignoffForWeb
4+
title: Enforce Commit Signoff for Web-Based Commits
5+
slug: /details/commitSignoffForWeb
66
---
77

8-
# Item-62
8+
# Enforce Commit Signoff for Web-Based Commits
99

1010
## Use Case
1111

@@ -19,8 +19,8 @@ Github Org Requires Commit Signoff for Web-Based Commits
1919

2020
## Details
2121

22-
- C-SCRM: undefined
23-
- Priority Group: Rec 4
22+
- C-SCRM: Y
23+
- Priority Group: R4
2424
- Mitre:
2525
- Sources: [CNCF SSCP 1.0 #325](https://github.com/cncf/tag-security/blob/main/supply-chain-security/supply-chain-security-paper/sscsp.md#require-signed-commits)
2626
- How To: [Github Docs](https://docs.github.com/en/organizations/managing-organization-settings/managing-the-commit-signoff-policy-for-your-organization#managing-compulsory-commit-signoffs-for-your-organization)

docs/details/item-25.mdx docs/details/commitStatusChecks.mdx

+6-6
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
sidebar_position: 26
3-
id: item-25
4-
title: Item-25
5-
slug: /details/item-25
3+
id: commitStatusChecks
4+
title: Require Commit Status Checks to Pass Before Merging
5+
slug: /details/commitStatusChecks
66
---
77

8-
# Item-25
8+
# Require Commit Status Checks to Pass Before Merging
99

1010
## Use Case
1111

@@ -19,8 +19,8 @@ All Required Commit Status Checks must pass before Merging
1919

2020
## Details
2121

22-
- C-SCRM: undefined
23-
- Priority Group: 6
22+
- C-SCRM: Y
23+
- Priority Group: P6
2424
- Mitre: [CWE-358](https://cwe.mitre.org/data/definitions/358.html)
2525
- Sources: [OpenSSF Scorecard](https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection)
2626
- How To: [Github Docs](https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging)

0 commit comments

Comments
 (0)