Tom Bedford comments

Results 13 comments of


                                            Tom Bedford

Map threats to maturity level

I've started to review this

S2C2F needs a website

I have reached out to OSSF Ops to request assistance with creating a repo, and for guidance on acquiring web-hosting services etc

S2C2F needs a website

I got some useful direction from OSSF Ops I'll bring some options to the next S2C2F meeting

S2C2F needs a website

We've going ahead with creating a website. I've started a poll for selecting the hosting solution we'd like to use: https://github.com/ossf/s2c2f/discussions/55

content: draft: Adding Dependency Track to tracks.md

@TomHennen - I don't have access to add an additional reviewer. Could you kindly add @adriandiglio

editorial: Update requirements.md to align verbiage

Closing this, and will make edits to draft-only

Discussion on path to S2C2F aligning with SLSA as its dependency track

Hey @meder Were you able to produce the first draft of track principles? As we discuss this opportunity within the S2C2F community, it'd be really useful to understand the delta...

editorial: Update provenance.md to align verbiage

> I wonder if we should make these changes to draft and the RC and not worry too much about the 1.1 or prior versions? @TomHennen On consideration, I agree,...

editorial: Update threats.md to align verbiage

Closing this, and will make edits to draft-only

Remove references to 'people' in Source Requirements

@TomHennen you can assign this to me, i'm happy to find/replace across the spec/site