-
-
Notifications
You must be signed in to change notification settings - Fork 0
OpenSSF Best Practices
iderex edited this page Jul 20, 2026
·
4 revisions
Moved. The passing-level badge self-assessment now lives in Security & Maturity Self-Assessment (Part 1), alongside the Silver/Gold and OSPS-Baseline map.
Repository · Issues · Releases · Security policy — report vulnerabilities privately, never in a public issue. Pages describe what is implemented today; if the wiki disagrees with the code, the code wins.
Getting started
- Installation
- Provider Setup
- Hardening & Options Reference
- Migrating from 9p4
- Troubleshooting
- Rollback
How it works
Security
- Security Model
- Security Conformance (ASVS / RFC 9700)
- Threat Model
- SSO-Only Login — design record
- Single Logout — design record
Standards & process (internal / maintainer)