Skip to content

Deepen security/privacy reviewer coverage - #4

Open
bhdicaire wants to merge 1 commit into
mainfrom
security-reviewer-depth
Open

Deepen security/privacy reviewer coverage#4
bhdicaire wants to merge 1 commit into
mainfrom
security-reviewer-depth

Conversation

@bhdicaire

Copy link
Copy Markdown
Member

Summary

  • bump the security/privacy reviewer to version 0.2
  • add vulnerability-class checklist coverage
  • add supply-chain/tooling collector for Scorecard, OSV/native audit, secret scanning, SBOM/provenance, and trust-anchor verifier evidence
  • update contract tests for the new reviewer version and worker expectations

Tests

  • python3 -m unittest discover -s tests -p 'test_*.py'

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants