Skip to content

Commit

Permalink
Update security_baseline.md
Browse files Browse the repository at this point in the history
@marcelamelara added goals for once sandbox

Signed-off-by: Dana Wang <[email protected]>
  • Loading branch information
Danajoyluck authored Jul 17, 2024
1 parent ecd09c7 commit 5145d96
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions process/security_baseline.md
Original file line number Diff line number Diff line change
Expand Up @@ -80,6 +80,8 @@ As a software project progresses through the [OpenSSF technical initiative life
This phased approach intends to support maintainers, contributors, and the community in innovating quickly with security built into the design or enabled by default.

### Baseline - Once Sandbox
When the project starts, it's critical to have a security foundation to reduce a class of vulnerabilities and secure your digital assets with strong credential protections.

| Security Baseline | Objective | How to Implement | How to Verify|
|-------|-------|-------|-------|
| A memory-safe language is adopted for new projects or new components. | Reduce memory safety vulnerabilities at scale. | Choose one of the [memory-safe languages](https://www.memorysafety.org/docs/memory-safety/) <br /> <br /> For preexisting projects in C or C++, follow the [Compiler Options Hardening Guide](https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++) | Check the [file extension](#Standard-File-Extensions-of-Common-Programming-Languages) and compare with the code. <br /> <br />
Expand Down

0 comments on commit 5145d96

Please sign in to comment.