[CNCF Incubation] OpenSSF Best Practices 'Passing'

[sam-heilbron]

xref: #7

Achieve the Open Source Security Foundation (OpenSSF) Best Practices passing badge.

opensff doc
github doc

Definition of Done

• Update [CNCF Incubation] Due Diligence Review #7 with a checkmark on the opensssf best practices section
• Update the kagent README to reflect the badge
• Close this issue

[sam-heilbron]

https://www.bestpractices.dev/en/projects/10723 we have a badge, it is not yet passing

[sam-heilbron]

We are at 97% of passing.

dynamic_analysis

It is SUGGESTED that at least one dynamic analysis tool be applied to any proposed major production release of the software before its release.

Action: TODO

dynamic_analysis_enable_assertions

It is SUGGESTED that the project use a configuration for at least some dynamic analysis (such as testing or fuzzing) which enables many assertions. In many cases these assertions should not be enabled in production builds.

Action: TODO

[sam-heilbron]

Submitted an email requesting ownership transfer, to make @linsun the owner of the badge

[sam-heilbron]

Adding badge to readme as part of kagent-dev/kagent#915

[sam-heilbron]

@linsun is now the owner of the badge. I am investigating how to achieve 100% passing.

[sam-heilbron]

Once kagent-dev/kagent#970 is completed, we should be able to update the badge to include dynamic analysis

[sam-heilbron]

See https://www.bestpractices.dev/projects/10723/badge. We have a passing badge! Closing