Skip to content

chore: add OpenSSF trust baseline - #16

Merged
dzeusking-dev merged 2 commits into
mainfrom
chore/openssf-trust-20260904
Sep 4, 2026
Merged

chore: add OpenSSF trust baseline#16
dzeusking-dev merged 2 commits into
mainfrom
chore/openssf-trust-20260904

Conversation

@dzeusking-dev

Copy link
Copy Markdown
Contributor

Summary

  • add pinned OpenSSF Scorecard and dependency review workflows
  • preserve the existing GitHub CodeQL default setup without duplication
  • add evidence-backed governance, maintenance, support, trust, and Security Insights v2.2.0 documentation
  • add a non-claiming Best Practices questionnaire draft

Verification

  • ruff check and format checks: passed
  • pytest: 120 passed
  • package build: passed
  • actionlint 1.7.12: passed
  • Security Insights schema v2.2.0 via CUE: passed
  • JSON parse and local documentation links: passed
  • diff-only gitleaks 8.30.1: no leaks

No release, tag, version bump, certification claim, or paid feature.

Signed-off-by: Bartosz Joachimiak <262029076+dzeusking-dev@users.noreply.github.com>
@dzeusking-dev
dzeusking-dev merged commit fa48e28 into main Sep 4, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant