Repository navigation
feat: add support for BR-07.01 and BR-07.02 - #127
Conversation
0350d50 to
78fe205
Compare
jmeridth
left a comment
jmeridth
left a comment
There was a problem hiding this comment.
Couple suggestions. Non-blocking.
|
@trumant Not 100% sure on the suggestion code alignments. They are rendering weird, so please double check them if used. |
2c214c7 to
9f86f3b
Compare
|
@trumant ossf/security-baseline#373 merged. We good to move forward here? Do we need a dependency update on this PR? |
Will take a look tomorrow to see where this stands. |
9f86f3b to
9ceb5ec
Compare
This change adds support for the newly proposed controls for secrets management within the project. BR-07.01 is fully implemented and BR-07.02 is stubbed out This change relates to the work in ossf/security-baseline#373 Signed-off-by: Travis Truman <trumant@gmail.com>
Co-authored-by: Jason Meridth <35014+jmeridth@users.noreply.github.com>
9ceb5ec to
8734307
Compare
Kusari Analysis Results:
Combined security analysis shows this PR is safe to merge. The dependency analysis confirms the addition of github.com/google/go-github/v74@v74.0.0 is a well-maintained Google library with excellent security scores (maintenance: 10/10, code review: 9/10) and zero known vulnerabilities. The code analysis reinforces this with completely clean results across all security categories - no code vulnerabilities, exposed secrets, workflow issues, or dependency problems. All 11 files passed security checks and govulncheck found no issues. This represents a routine maintenance update from a reputable source with minimal security risk and no identified threats. Note View full detailed analysis result for more information on the output and the checks that were run.
Found this helpful? Give it a 👍 or 👎 reaction! |
|
Kusari PR Analysis rerun based on - 8734307 performed at: 2025-09-19T11:55:34Z - link to updated analysis |
Co-authored-by: Jason Meridth <35014+jmeridth@users.noreply.github.com>
8734307 to
8639a7a
Compare
|
Kusari PR Analysis rerun based on - 8639a7a performed at: 2025-09-19T11:59:08Z - link to updated analysis |
|
Kusari PR Analysis rerun based on - 457d044 performed at: 2025-09-21T15:51:54Z - link to updated analysis |
Dismissing as the requested changes were made and the PR has since received review
This change adds support for the newly proposed
controls for secrets management within the project.
BR-07.01 is fully implemented and BR-07.02 is stubbed out
This change relates to the work in ossf/security-baseline#373