Issues

• Release checklist still hand-edits version and draft state into the docs pages

  ossf/security-baseline#551 · Filter by author eddie-knight opened on Aug 31, 2026

• Audit and split requirements combining multiple obligations

  ossf/security-baseline#546 · Filter by author Satarupa22-SD opened on Aug 28, 2026

• Tracking: legal (OSPS-LE) requirement decisions

  criteria
  ossf/security-baseline#536 · Filter by author eddie-knight opened on Aug 26, 2026

• Define role of "standards owners"

  documentation
  Task

  ossf/security-baseline#511 · Filter by author funnelfiasco opened on May 14, 2026
  4

  

• Enhance security guidelines for software supply chain

  ossf/security-baseline#486 · Filter by author eddie-knight opened on Mar 17, 2026
  

• OpenSSF Documentation Updates

  ossf/security-baseline#454 · Filter by author GeauxJD opened on Dec 18, 2025
  

• Review and potentially map OWASP SCVS to Baseline

  criteriamappings
  Feature

  ossf/security-baseline#448 · Filter by author SecurityCRob opened on Dec 4, 2025
  

• Increase resolution of mapping applicability

  criteriaenhancementmappings
  Feature

  ossf/security-baseline#445 · Filter by author funnelfiasco opened on Nov 26, 2025
  2

• Make explicit when a control builds on an earlier control

  enhancementhelp wanted
  Feature

  ossf/security-baseline#423 · Filter by author ericcornelissen opened on Nov 16, 2025
  2

• "When the project has made a release" is confusing

  bugcriteria
  Bug

  ossf/security-baseline#422 · Filter by author ericcornelissen opened on Nov 16, 2025
  1

  

• Help maintainers with answering questions as much as possible

  ossf/security-baseline#421 · Filter by author ericcornelissen opened on Nov 16, 2025
  4

• Add threats to catalog

  enhancement
  Feature

  ossf/security-baseline#409 · Filter by author funnelfiasco opened on Oct 14, 2025
  2

  

• Consider dropping legal requirements

  blockedcriteria
  ossf/security-baseline#403 · Filter by author funnelfiasco opened on Oct 6, 2025
  22

• Proposal to add a packaging metdata license requirement

  criteria
  ossf/security-baseline#401 · Filter by author hyandell opened on Oct 3, 2025
  1

• Proposal to merge OSPS-LE-03.0*

  criteria
  ossf/security-baseline#400 · Filter by author hyandell opened on Oct 3, 2025
  1

• Proposal to remove OSPS-LE-01.01

  criteria
  ossf/security-baseline#397 · Filter by author hyandell opened on Oct 3, 2025
  2

• Clarify meaning of "standardized tooling"

  bugcriteria
  Bug

  ossf/security-baseline#393 · Filter by author funnelfiasco opened on Sep 16, 2025

• Add the crosswalk Matrix CSV to the website somewhere

  enhancementmappingswebsite
  ossf/security-baseline#378 · Filter by author funnelfiasco opened on Aug 18, 2025

• Mapping references for OSSF SCM Best Practices guide

  mappings
  ossf/security-baseline#377 · Filter by author trumant opened on Aug 15, 2025

• Add a control for cryptography use

  criteriaenhancement
  ossf/security-baseline#365 · Filter by author funnelfiasco opened on Jul 24, 2025

• Create a control for incident response procedures

  criteriaenhancement
  ossf/security-baseline#364 · Filter by author funnelfiasco opened on Jul 24, 2025

• Add a control for logging/alerts/monitoring

  criteriaenhancement
  ossf/security-baseline#363 · Filter by author funnelfiasco opened on Jul 24, 2025

• Add a control for SDLC process

  criteriaenhancement
  ossf/security-baseline#362 · Filter by author funnelfiasco opened on Jul 24, 2025
  1

• Control regarding fuzzing

  criteriaenhancement
  ossf/security-baseline#361 · Filter by author funnelfiasco opened on Jul 24, 2025

• Create a control for review/maintenance/upkeep

  criteriaenhancement
  ossf/security-baseline#354 · Filter by author funnelfiasco opened on Jul 8, 2025