loopbackio / security

[WORK IN PROGRESS] A centralised repository for all security-related matters on the LoopBack Project.

loopbackio/security Issues

Migrate Github Protected Branch/Tag Rules rules to Github Repository Rules rulesets
Updated 7 months ago
Adopt OSSF Security Insights 1.0 specification
Updated 3 months ago
Provide additional details to OSV Schema
Updated 10 months ago
Replace Secvisogram with `csaf-validator-lib`
Updated 2 years ago
Generate SWID and CoSWID tags
Updated 2 years ago
Align with OpenSSF NPM Best Practices v1
Updated 2 years ago
Align with SLSA3+ for verifiable provenance
Updated 7 months ago1
Track Implementation of NPM "RFC for linking packages to their source and build"
Updated 7 months ago2
Ghosted on Security Report (LBSEC-20220806-1)
Closed 2 years ago10
Align with FIRST Guidelines and Practices for Multi-Party Vulnerability Coordination and Disclosure
Updated 2 years ago
Restrict imported GitHub Actions to an allowlist
Updated 2 years ago
Pin GitHub Actions to Git commit hash
Updated 7 months ago
Adopt StepSecurity Harden Runner for GitHub Actions
Updated 9 months ago
Adopt OpenSSF Scorecards
Updated 7 months ago
Track potential adoption of OpenSSF Project Security Information Specification
Updated 10 months ago
Track adoption of potential OpenJSF Security Program
Updated 2 years ago
Formalise Vulnerability Response Process
Updated 9 months ago1
Adopt OpenSSF Best Practices
Updated 9 months ago1
Track Potential Adoption of NPM Audit Resolve / Counterclaim / Assertions
Updated 2 years ago
Provide visibility into dependency tree permutations
Updated 2 years ago
Enforce opt-in signed Git Commits and Tags
Updated 2 years ago1
Add lockfile validation
Updated 2 years ago
Register `LBSEC-` prefix in OSV schema
Closed 2 years ago3
Produce GitLab-format security advisories
Updated 2 years ago
Update NIST CPE Dictionary
Updated 10 months ago1