Clarify that OSPS-AC-02 applies primarily to self-hosted solutions (#151

) * Move OSPS-AC-02 to level 3 based on level criteria Signed-off-by: Evan Anderson <[email protected]> * Apply funnelfiasco's suggested wording change Signed-off-by: Evan Anderson <[email protected]> * Update baseline/OSPS-AC.yaml Co-authored-by: Eddie Knight <[email protected]> Signed-off-by: Evan Anderson <[email protected]> --------- Signed-off-by: Evan Anderson <[email protected]> Signed-off-by: Evan Anderson <[email protected]> Co-authored-by: Eddie Knight <[email protected]>
ossf · Jan 21, 2025 · 6adf8bb · 6adf8bb
1 parent 8dfef53
commit 6adf8bb
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/baseline/OSPS-AC.yaml b/baseline/OSPS-AC.yaml
@@ -50,8 +50,9 @@ criteria:
       the project's repository by limiting the
       permissions granted to collaborators.
     details: |
-      Configure the project's version control
-      system to assign the lowest available
+      Most public version control systems are configured
+      in this manner. Ensure the project's version control
+      system always assigns the lowest available
       permissions to collaborators by default when
       added, granting additional permissions only
       when necessary.