Skip to content

Issues: ossf/wg-best-practices-os-developers

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

56 Open 108 Closed
56 Open 108 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

pySCG: Either add is() to CWE-595 or create a new rule Product: Python Hardening Guide
#714 opened Dec 17, 2024 by myteron
pySCG: Python type hints and what they are for Product: Python Hardening Guide
#713 opened Dec 17, 2024 by myteron
pySCG: Numbers related landing page to explain generic issues Product: Python Hardening Guide
#712 opened Dec 17, 2024 by myteron
pySCG: providing building blocks in context with sign, encrypt, key-handling Product: Python Hardening Guide
#711 opened Dec 17, 2024 by myteron
pySCG: CWE-89 image formatting wonky, need correct license quote for XKCD using CC-BY-2.5 Product: Python Hardening Guide
#708 opened Dec 16, 2024 by myteron
Clarification needed for projects linking against prebuilt static libraries Product: Compiler Hardening Guide
#705 opened Dec 12, 2024 by thomasnyman
1
@thomasnyman
CWE-366 Race Condition within a Thread Python version dependent Product: Python Hardening Guide
#704 opened Dec 5, 2024 by BartyBoi1128
Probable Context-Aware Warnings for Floating-Point Equality Comparisons
#703 opened Dec 5, 2024 by saadman19
3
Consider -ftrapv for C and C++ Compiler Hardening Guide Enhancement Product: Compiler Hardening Guide
#685 opened Oct 31, 2024 by thomasnyman
2
@thomasnyman
2
Consider -Wdangling-gsland -Wreturn-stack-address for C and C++ Compiler Hardening Guide Enhancement Product: Compiler Hardening Guide
#684 opened Oct 31, 2024 by thomasnyman
pySCG: Missing rules on CWE Top 25 helpwanted Product: Python Hardening Guide
#680 opened Oct 29, 2024 by myteron
2
Concise Guide for Evaluating OSS: Questions 9.i. and 10.v. seem redundant Product: Concise Guides
#678 opened Oct 27, 2024 by haxtibal
Optimization option recommendations should have caveats Product: Compiler Hardening Guide
#660 opened Oct 14, 2024 by thesamesam
13
_FORTIFY_SOURCE recommendation is a timebomb Product: Compiler Hardening Guide
#659 opened Oct 14, 2024 by thesamesam
8
_FORTIFY_SOURCE guidance confuses people, should suggest undefining with more care (as order matters) Product: Compiler Hardening Guide
#658 opened Oct 14, 2024 by thesamesam
5
pySCG: Replacing CWE-400 with something that describes the resource exhaustion case better Product: Python Hardening Guide
#657 opened Oct 11, 2024 by openrefactorymunawar
@myteron
1
pySCG typo or error in CWE-703/CWE-392/compliant03.py Product: Python Hardening Guide
#652 opened Oct 11, 2024 by myteron
NCSC Vendor Security Assessment V.B.5 Unsafe functions - not used in vendor's released code helpwanted
#646 opened Oct 9, 2024 by myteron
2
pySCG: Modifying the description of CWE-197 so that it captures the CWE better Product: Python Hardening Guide
#635 opened Sep 30, 2024 by openrefactorymunawar
@myteron
2
pySCG: Python Hardening Guide: we should mention and explain audit hooks, sys.audit and sys.addaudithook Product: Python Hardening Guide
#632 opened Sep 25, 2024 by myteron
Project idea: Security sandboxing guidelines new product idea
#631 opened Sep 24, 2024 by l0kod
4
Release Lifecycle best practises
#628 opened Sep 23, 2024 by hex-m
Consider -Wl,-z,separate-code for C and C++ Compiler Hardening Guide Enhancement Product: Compiler Hardening Guide
#588 opened Aug 22, 2024 by thomasnyman
1
Create guidance on using buffer overflow attributes in C backlog Enhancement Product: Compiler Hardening Guide
#551 opened Jun 27, 2024 by david-a-wheeler
1
clarification needed in RegEx guide Product: Regular Expression Guide
#548 opened Jun 21, 2024 by ctcpip
3
ProTip! no:milestone will show everything without a milestone.