Dana Wang

GitHub Enterprise Production Readiness Document Review - Authentication, Authorization, Audit Log Ingestion, Monitoring and Alerting

4

Thanks everyone for investing time.....This issue is per Arnaud's request in response to the 4/30 TAC pre-read that CRob shared. GitHub Enterprise Production Readiness Document needs TAC review and feedback....

OpenSSF Security MVP

4

We need to define the minimal security requirements/baseline for OpenSSF projects. The requirements will include projects at different stages of the lifecycle. This would be an extension of issue [214...

Discussion - OpenSSF GitHub Enterprise Account Structure and Shared Responsibility Model

4

The OpenSSF staff members have been administering various repo-level configurations. Now all the projects are under the newly acquired enterprise account, we'd like TAC to advise on how to best...

A new technical initiative - Develop project templates for a few different common scenarios, with everything set up so a new project can just start out in a good configuration....

**Is your feature request related to a problem? Please describe.** Scorecard reports the below findings. If the report is accurate, the token permissions need to be reduced to the minimal....

Improving OpenSSF Landscape

2

[OpenSSF landscape](https://landscape.openssf.org/) card is dismal compared to [Cloud Native Landscape](https://landscape.cncf.io/) and needs to be much better. Resources for improving the landscape: OpenSSF landscape repo: https://github.com/ossf/ossf-landscape Uses automation: https://github.com/jmertic/landscape-tools/blob/main/INSTRUCTIONS.md#recommended---automatic-build-with-github-actions CNCF landscape...