The safeguards map / 1.1 Code and dependencies
S2C2F attestation schema and tool
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A GitHub Actions tool in development that assesses a repository against S2C2F requirements and writes the result in OSCAL format.
Where it sits
1.1 Code and dependencies (primary): Reviews a GitHub repository's implementation of S2C2F control requirements up to Maturity Level 2 and writes the result as an OSCAL JSON file.
This tool is being developed to provide a way to use GitHub Actions to assess a GitHub repo's implementation of S2C2F control requirements up to Maturity Level 2, and outputting the results in a machine-readable JSON file in OSCAL format.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who make it
- Runs
- in CI
Handoffs
None recorded.
Listed, not drawn: it is not yet released, and no documented handoff and no foundation home places it on the map.
Collector's note
The README says an OpenSSF working group initiated the project, but the OpenSSF TAC project table has no row for it, so it has no foundation home here. OSCAL is not one of the map's handoff artifacts.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.