Apply for OpenSSF Best Practices Security Badge

[nicholascarroll]

Free security certification.

Emacs gets deleted by security teams because it has a lot of CVEs in dependencies. Emsys to the rescue! It is especially suited to high security environments because it has a very low LOC count for its feature set.

Requirements

• Add SECURITY.md with vulnerability reporting process
• Set up basic static analysis testing
• Document security practices
• Apply at https://bestpractices.coreinfrastructure.org

[nicholascarroll]

I created a branch in my fork called security-infrastructure which has just the basics for the first step toward certification. I have these same in main. And you can see the history of the CodeQL tests in the Security tab. 😀

[japanoise]

Sounds like a good win here. Thanks for all your work on Emsys recently. I'm still having trouble finding time for hobby programming but I'm around to review PRs and roll up releases when you're ready.

[nicholascarroll]

Great well, actually, I’ve screwed s few things up and am gonna need to do a fair bit to fix it.

[nicholascarroll]

OK I've made a new PR for you that I am happy with.

[nicholascarroll]

I close that PR as well!!! Because I’ve added unit Test which run in GitHub. And they currently failing. And broken. So at least get those basic tests to pass. And then I’ll put forward a new PR.