ossf / wg-securing-critical-projects

Helping allocate resources to secure the critical open source projects we all depend on.

ossf/wg-securing-critical-projects Issues

Adopt "Census I" as an archived Project/SIG under this WG
Updated a month ago7
[INFORM] Allstar joining the OpenSSF Scorecard project
Closed 2 months ago2
Links in the main Readme are broken
Updated 6 months ago
Need to link from README to list
Updated 8 months ago3
Include the purls of the software in the list
Updated 9 months ago1
What does the "apache" in the critical projects list mean?
Updated 10 months ago1
Adopt the Alpha-Omega 10k critical OSS Projects list under this WG
Updated a year ago5
Google sheet restrictions
Closed a year ago8
The critical project `minimist` in the github is gone with 404
Closed a year ago2
Consider adding (and tracking) the components necessary to produce and update ca-certificates and tzdata
Updated a year ago3
FreeBSD and related projects are critical
Updated a year ago1
Consider adding sqlite, libpng, zlib, libjpeg, libarchive, zstd, openssh and busybox
Closed a year ago2
Add NIST definition of critical software per EO
Closed a year ago2
WG Charter updates
Closed a year ago5
Project for consideration
Closed a year ago4
List of Critical Projects links
Closed a year ago3
404 on README page
Closed 2 years ago
Presentation from 2020: broken link to subsystems that don't tag for stable (slide 25)
Updated 2 years ago7
Typo in critical projects spreadsheet for homebrew-cask
Closed 2 years ago2
update description field in .github/settings.yml
Updated 2 years ago1
xkcd copyright/license violation (lack of attribution) in README
Closed 2 years ago2
Consider adding the software described in OIN's Linux System table
Updated 2 years ago1
Weekly meetings
Closed 2 years ago5
Quick note: Linux kernel reviews
Closed 2 years ago3
curl/libcurl official docker image relevance ?
Updated 2 years ago
Clarify which parts of a multi-component project are in scope
Updated 3 years ago
Consider adding (and tracking) packages from the Civil Infrastructure Platform (CIP)
Updated 3 years ago1
Provide a machine-readable version of the list under source control
Updated 3 years ago
Consider using functional tagging to identify projects critical to trust
Updated 3 years ago
Some possible data sources to identify package managers, build systems and compilers (build toolchain)
Updated 3 years ago
Critical projects from the low-level/embedded space
Updated 3 years ago5
Add Digital Public Goods registry to how to id critical projects
Updated 3 years ago
Governance
Updated 3 years ago
Criticality Badge
Closed 4 years ago
Criticality Score badge
Updated 4 years ago
CII Census Work
Closed 4 years ago5
Slack Channel
Closed 4 years ago3
Link to meeting recordings?
Closed 4 years ago2
Schedule first weekly meeting!
Closed 4 years ago2
The email group doesn't appear to be public
Closed 4 years ago3