Skip to content

Issues: loopbackio/security

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

25 Open 2 Closed
25 Open 2 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Standards/specifications/guidance/recommendations to comply with
#40 opened Nov 22, 2024 by achrinza
Review and align with OpenJSF's SBOM/C-SCRM recommendations openjsf
#39 opened Nov 22, 2024 by achrinza
Migrate Github Protected Branch/Tag Rules rules to Github Repository Rules rulesets
#38 opened Nov 11, 2023 by achrinza
1 task done
Adopt OSSF Security Insights 1.0 specification openssf
#37 opened Oct 25, 2023 by achrinza
Provide additional details to OSV Schema
#36 opened Aug 12, 2023 by achrinza
Replace Secvisogram with csaf-validator-lib
#35 opened Nov 8, 2022 by achrinza
Generate SWID and CoSWID tags
#34 opened Nov 7, 2022 by achrinza
Align with OpenSSF NPM Best Practices v1
#33 opened Sep 8, 2022 by achrinza
Align with SLSA3+ for verifiable provenance
#32 opened Sep 3, 2022 by achrinza
1
Track Implementation of NPM "RFC for linking packages to their source and build"
#31 opened Aug 9, 2022 by achrinza
2
Align with FIRST Guidelines and Practices for Multi-Party Vulnerability Coordination and Disclosure
#29 opened May 16, 2022 by achrinza
Restrict imported GitHub Actions to an allowlist
#28 opened May 14, 2022 by achrinza
Pin GitHub Actions to Git commit hash
#27 opened May 14, 2022 by achrinza
4 tasks done
@achrinza
Adopt StepSecurity Harden Runner for GitHub Actions
#26 opened May 14, 2022 by achrinza
1 task done
Adopt OpenSSF Scorecards openssf
#25 opened May 13, 2022 by achrinza
Track potential adoption of OpenSSF Project Security Information Specification
#24 opened May 13, 2022 by achrinza
Track adoption of potential OpenJSF Security Program
#23 opened May 13, 2022 by achrinza
1
Formalise Vulnerability Response Process
#22 opened May 13, 2022 by achrinza
1
Adopt OpenSSF Best Practices openssf
#21 opened May 12, 2022 by achrinza
1
Track Potential Adoption of NPM Audit Resolve / Counterclaim / Assertions openjsf
#20 opened Apr 28, 2022 by achrinza
Provide visibility into dependency tree permutations
#19 opened Mar 18, 2022 by achrinza
Enforce opt-in signed Git Commits and Tags
#18 opened Mar 17, 2022 by achrinza
3 tasks
1
Add lockfile validation
#16 opened Mar 12, 2022 by achrinza
Produce GitLab-format security advisories
#12 opened Mar 9, 2022 by achrinza
Update NIST CPE Dictionary
#3 opened Feb 18, 2022 by achrinza
1
ProTip! Adding no:label will show everything without a label.