Skip to content

feat: add OSPS baseline maturity config - #117

Open
slegarraga wants to merge 2 commits into
gemaraproj:mainfrom
slegarraga:feat/baseline-maturity-1
Open

feat: add OSPS baseline maturity config#117
slegarraga wants to merge 2 commits into
gemaraproj:mainfrom
slegarraga:feat/baseline-maturity-1

Conversation

@slegarraga

Copy link
Copy Markdown

Closes #116

Summary

Adds Baseline Maturity Level 1 configuration for gemara-mcp:

  • security-insights.yml following the gemara repository pattern, with repository URLs adapted to gemara-mcp;
  • .github/workflows/baseline-scanner.yml running the weekly OSPS baseline scan and allowing manual dispatch.

Verification

  • Both YAML files parse successfully.
  • No secrets or private values are included; the workflow reads only the existing GEMARA_AUTOMATION_CLIENT_ID and GEMARA_AUTOMATION_PRIVATE_KEY repository secrets.

Config-only change.

Signed off with DCO.

@slegarraga
slegarraga requested a review from a team as a code owner August 7, 2026 13:52

@jpower432 jpower432 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for submitting this @slegarraga! Really close, just some outdated core member entries like the other one.

Comment thread security-insights.yml Outdated
affiliation: GitHub
email: jmeridth@gmail.com
primary: false
- name: Travis Truman

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
- name: Travis Truman
- name: Hannah Braswell

@slegarraga slegarraga Aug 21, 2026

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done, applied in the latest commit. Thanks for the precise pointers, Jenn!

Comment thread security-insights.yml Outdated
email: jmeridth@gmail.com
primary: false
- name: Travis Truman
affiliation: Independent

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
affiliation: Independent
affiliation: Red Hat

@slegarraga slegarraga Aug 21, 2026

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done, applied in the latest commit. Thanks for the precise pointers, Jenn!

Comment thread security-insights.yml Outdated
primary: false
- name: Travis Truman
affiliation: Independent
email: trumant@gmail.com

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
email: trumant@gmail.com

@slegarraga slegarraga Aug 21, 2026

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done, applied in the latest commit. Thanks for the precise pointers, Jenn!

Comment thread security-insights.yml Outdated
affiliation: Independent
email: trumant@gmail.com
primary: false
- name: Alex Speasmaker

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we delete this entry?

@slegarraga slegarraga Aug 21, 2026

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done, applied in the latest commit. Thanks for the precise pointers, Jenn!

Signed-off-by: Sebastian Legarraga <64795732+slegarraga@users.noreply.github.com>
Travis Truman -> Hannah Braswell (Red Hat); drop the outdated Alex
Speasmaker entry, per jpower432's review.

Signed-off-by: Sebastian Legarraga <64795732+slegarraga@users.noreply.github.com>
@slegarraga
slegarraga force-pushed the feat/baseline-maturity-1 branch from 94e76b5 to 247f5d0 Compare August 22, 2026 04:37
@slegarraga

Copy link
Copy Markdown
Author

Thanks for the quick review, @jpower432! Refreshed the core-team entries in 247f5d0: replaced the outdated Travis Truman entry with Hannah Braswell (Red Hat) and dropped the outdated Alex Speasmaker entry, matching the current core team. All three checks are green on the updated head. Ready for another look whenever you get a chance.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Ensure repository meets Baseline Maturity Level 1

2 participants