Skip to content

Commit 5145d96

Browse files
authored
Update security_baseline.md
@marcelamelara added goals for once sandbox Signed-off-by: Dana Wang <Danajoyluck@users.noreply.github.com>
1 parent ecd09c7 commit 5145d96

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

process/security_baseline.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -80,6 +80,8 @@ As a software project progresses through the [OpenSSF technical initiative life
8080
This phased approach intends to support maintainers, contributors, and the community in innovating quickly with security built into the design or enabled by default.
8181

8282
### Baseline - Once Sandbox
83+
When the project starts, it's critical to have a security foundation to reduce a class of vulnerabilities and secure your digital assets with strong credential protections.
84+
8385
| Security Baseline | Objective | How to Implement | How to Verify|
8486
|-------|-------|-------|-------|
8587
| A memory-safe language is adopted for new projects or new components. | Reduce memory safety vulnerabilities at scale. | Choose one of the [memory-safe languages](https://www.memorysafety.org/docs/memory-safety/) <br /> <br /> For preexisting projects in C or C++, follow the [Compiler Options Hardening Guide](https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++) | Check the [file extension](#Standard-File-Extensions-of-Common-Programming-Languages) and compare with the code. <br /> <br />

0 commit comments

Comments
 (0)