Skip to content

CII-Best-Practices for Nodejs: Gold level #956

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 25 commits into
base: main
Choose a base branch
from
Open
Changes from 1 commit
Commits
Show all changes
25 commits
Select commit Hold shift + click to select a range
5d3fba7
feat: copied passing criterial Questions and Answers
UlisesGascon Apr 16, 2023
d936238
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
92588d0
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
ba689e7
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
871db48
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
58a0411
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
19aab9f
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
e0fd2db
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
d36c6e0
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
5a25aa4
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
702f6d3
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
af5c87c
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
58b4364
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
5e75801
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
0d60f62
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
676d31e
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
1feeaa8
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
4934f98
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
66c2f34
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
da57efe
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
0cfdca9
Update tools/ossf_best_practices/gold_criteria.md
UlisesGascon Nov 26, 2023
f639ecb
docs: added questions context and consolidate the current responses
UlisesGascon Nov 26, 2023
3f496a8
docs: add commit hash reference for the context links
UlisesGascon Jan 4, 2024
91f35e7
docs: update responses and references
UlisesGascon Jan 4, 2024
10f6219
docs: update OpenSSF Best practices Gold criteria
UlisesGascon May 7, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update tools/ossf_best_practices/gold_criteria.md
  • Loading branch information
UlisesGascon authored Nov 26, 2023
commit 676d31ee2f05fe2d60ff705c016df198e9c97a0a
2 changes: 1 addition & 1 deletion tools/ossf_best_practices/gold_criteria.md
Original file line number Diff line number Diff line change
Expand Up @@ -59,7 +59,7 @@ https://github.com/nodejs/node

> The project MUST require two-factor authentication (2FA) for developers for changing a central repository or accessing sensitive data (such as private vulnerability reports). This 2FA mechanism MAY use mechanisms without cryptographic mechanisms such as SMS, though that is not recommended.

_Possible answers: Met/Unmet_
**Met**

> The project's two-factor authentication (2FA) SHOULD use cryptographic mechanisms to prevent impersonation. Short Message Service (SMS) based 2FA, by itself, does NOT meet this criterion, since it is not encrypted.

Expand Down