Search results

The -Wconversion warning in the Compiler Options Hardening Guide should come with a caveat for brown-field projects

good first issueGood for newcomersGood for newcomers

Product: Compiler Hardening Guide

Status: Open.

#819 In ossf/wg-best-practices-os-developers;

· thomasnyman opened on Mar 20, 2025

GitHub Workflows: Recommend pinning actions by hash, not tag

Status: Open.

#818 In ossf/wg-best-practices-os-developers;

· andrewpollock opened on Mar 20, 2025

Create guidance on simplifying component updates

Status: Open.

#813 In ossf/wg-best-practices-os-developers;

· david-a-wheeler opened on Mar 11, 2025

pySCG: New Python specific rule that promotes signed software, CWE-494: Download of Code Without Integrity Check

helpwanted

Product: Python Hardening Guide

Status: Open.

#806 In ossf/wg-best-practices-os-developers;

· myteron opened on Feb 27, 2025

Consider using GitHub teams for translator review

Status: Open.

#801 In ossf/wg-best-practices-os-developers;

· david-a-wheeler opened on Feb 25, 2025

pySCG: write CWE-477: Use of Obsolete Function

helpwanted

Product: Python Hardening Guide

Status: Open.

#800 In ossf/wg-best-practices-os-developers;

· myteron opened on Feb 25, 2025

"Require approvals" work flow for GitHub has changed

Product: SCM Guide

Status: Open.

Bug

#720 In ossf/wg-best-practices-os-developers;

· torgo opened on Jan 19, 2025

Link checker

Admin

good first issueGood for newcomersGood for newcomers

Status: Open.

#718 In ossf/wg-best-practices-os-developers;

· balteravishay opened on Jan 14, 2025

pySCG: Either add is() to CWE-595 or create a new rule

Product: Python Hardening Guide

Status: Open.

#714 In ossf/wg-best-practices-os-developers;

· myteron opened on Dec 17, 2024

pySCG: Python type hints and what they are for

Product: Python Hardening Guide

Status: Open.

#713 In ossf/wg-best-practices-os-developers;

· myteron opened on Dec 17, 2024

pySCG: Numbers related landing page to explain generic issues

Product: Python Hardening Guide

Status: Open.

#712 In ossf/wg-best-practices-os-developers;

· myteron opened on Dec 17, 2024

pySCG: providing building blocks in context with sign, encrypt, key-handling

Product: Python Hardening Guide

Status: Open.

#711 In ossf/wg-best-practices-os-developers;

· myteron opened on Dec 17, 2024