Skip to content

Commit 2ea78d9

Browse files
authored
Update faq.md
Signed-off-by: victorjunlu <[email protected]>
1 parent 41d7f48 commit 2ea78d9

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docs/faq.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ We encourage projects using the OSPS Baseline to say something like “As of Apr
7777

7878
This baseline seeks to address security hygiene elements — those which lock down the ways of working, delivering the product, and equipping its users to adopt it safely. To use an analogy, it’s like home builders who lock up tools, secure the construction site, and control who enters, but also ensure the finished house is handed over with clear instructions for safe use. It’s not about changing the blueprint—it’s about protecting the build process and delivering a home that’s ready to live in securely.
7979

80-
By contrast, secure design and development are out of scope for this activity. Continuing the analogy, those activities would be the responsibility of the architects and builders who create the blueprint and decide how the house is constructed to prevent break-ins—with reinforced doors, secure locks, strategic layouts/no backdoors, or built-in security systems. It’s about designing security into the structure itself, not just safeguarding the build and handoff.
80+
By contrast, secure design and development are out of scope for this activity. Continuing the analogy, those activities would be the responsibility of the architects and builders who create the blueprint and decide how the house is constructed to prevent break-ins—with reinforced doors, secure locks, strategic layouts/no backdoor, or built-in security systems. It’s about designing security into the structure itself, not just safeguarding the build and handoff.
8181

8282
## How can I get involved in the OSPS Baseline project?
8383
The OSPS Baseline project welcomes contributions in the [GitHub repository](https://github.com/ossf/security-baseline/pull/24/files).

0 commit comments

Comments
 (0)