SBOM | OpenSSF best practices badge | LFX Security Dashboard | Vulnerability Reporting | Other | Contact | |||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
ONAP | In progress. Debugging SPDX Generator Jenkins integration | Adopted by all sub projects. Several sub-projects at Silver level | On-boarded. OpenSSF badging inaccuracy fixed. Stale repos removed. | Implemented | Active security sub-committee. Meets regularly and preemptively addresses threats and vulnerabilities. | |||||||||
FD.IO | On-boarded | |||||||||||||
ODL | Integrated CycloneDX into CI
| In Progress 90% | On-boarded | |||||||||||
Anuket | Deemed inapplicable for spec sub-projects. | |||||||||||||
Tungsten Fabric | On-boarded | |||||||||||||
EMCO | Gitlab is not yet supported by the dashboard (https://community.lfx.dev/t/gitlab-support-or-manual-scans/1003) | |||||||||||||
XGVela | On-boarded | |||||||||||||
L3AF | On-boarded | |||||||||||||
ODIM | On-boarded |