From d8b83ab76ea5370f7d5efcf2f17a15f1427def35 Mon Sep 17 00:00:00 2001 From: Satarupa22-SD Date: Fri, 28 Aug 2026 23:42:21 +0530 Subject: [PATCH 1/2] feat: update OSPS-QA-06 Signed-off-by: Satarupa22-SD --- baseline/OSPS-QA.yaml | 27 ++++++++++++++++++++------- 1 file changed, 20 insertions(+), 7 deletions(-) diff --git a/baseline/OSPS-QA.yaml b/baseline/OSPS-QA.yaml index 19f59063..0fa25be3 100644 --- a/baseline/OSPS-QA.yaml +++ b/baseline/OSPS-QA.yaml @@ -205,15 +205,10 @@ controls: end-to-end tests. - id: OSPS-QA-06.02 text: | - The project documentation MUST clearly document when and - how tests are run. + Retired in https://github.com/ossf/security-baseline/pull/XXX applicability: - maturity-3 - recommendation: | - Add a section to the contributing documentation that explains how to - run the tests locally and how to run the tests in the CI/CD pipeline. - The documentation should explain what the tests are testing and how to - interpret the results. + state: Retired - id: OSPS-QA-06.03 text: | The project documentation MUST include a policy that @@ -225,6 +220,24 @@ controls: Add a section to the contributing documentation that explains the policy for adding or updating tests. The policy should explain what constitutes a major change and what tests should be added or updated. + - id: OSPS-QA-06.04 + text: | + The project documentation MUST document when tests are run. + applicability: + - maturity-3 + recommendation: | + Add a section to the contributing documentation that explains when + the automated tests are run in the CI/CD pipeline. + - id: OSPS-QA-06.05 + text: | + The project documentation MUST document how tests are run. + applicability: + - maturity-3 + recommendation: | + Add a section to the contributing documentation that explains how to + run the tests locally and how the tests are run in the CI/CD + pipeline. The documentation should explain what the tests are testing + and how to interpret the results. - id: OSPS-QA-07 title: | From 0c4bd4bdb6000cd78b169b26383d5e659bad5d65 Mon Sep 17 00:00:00 2001 From: Satarupa22-SD Date: Fri, 28 Aug 2026 23:45:10 +0530 Subject: [PATCH 2/2] add link to PR Signed-off-by: Satarupa22-SD --- baseline/OSPS-QA.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/baseline/OSPS-QA.yaml b/baseline/OSPS-QA.yaml index 0fa25be3..7fe15006 100644 --- a/baseline/OSPS-QA.yaml +++ b/baseline/OSPS-QA.yaml @@ -205,7 +205,7 @@ controls: end-to-end tests. - id: OSPS-QA-06.02 text: | - Retired in https://github.com/ossf/security-baseline/pull/XXX + Retired in https://github.com/ossf/security-baseline/pull/547 applicability: - maturity-3 state: Retired