The safeguards map / 1.1 Code and dependencies
Darnit
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A pluggable framework that reviews a project against a standard, starting with the OpenSSF Baseline, and generates signed attestations.
Where it sits
1.1 Code and dependencies (primary): Reviews a project's practices against a plugin-defined standard, starting with the OpenSSF Baseline and includes a Model Context Protocol (MCP) server for AI assistants.
is a pluggable compliance audit framework that helps projects conform to software engineering best practices
captured
plus the OpenSSF Baseline implementation as the first supported standard
captured
This repository includes an MCP (Model Context Protocol) server for AI assistant integration
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who make it
- Runs
- by handas an agent plugin
Handoffs
produces Provenance and signatures: in-toto attestations (signed)
Collector's note
The OpenSSF table lists the repository under its earlier kusari-oss owner.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.