Justin Cappos

Add software supply chain security criteria

2

@SantiagoTorres I would like to suggest the addition of software supply chain tracking criteria to the CII Badge process. The addition of cryptographically signed and validated steps in the software...

Integrate metadata cleanly into distributed software...

5

We need a better plan for how to integrate link files, the layout, delegated layouts, etc. into software we distribute. Asking the user to copy a bunch of things really...

[Project] Security Pals, Assemble!

5

**Description**: I'd like to run a pilot at NYU where I have a class of 100-150 students help CNCF projects get a self assessment completed. The students will work in...

[Project] "Applied Research" Subactivity

1

Description: The STAG group members often have good ideas they want to get out to the broader community. We've started to write up blog entries, etc. It may be useful...

Create MAINTAINERS.md

5

Copied from in-toto/in-toto (for now). We should iterate on this list.

We should label the repos in the org with information about the maturity and other aspects (experimental, etc.)