Adding Regulatory crosswalk mappings to LE category items (#145)

Adding Regulatory crosswalk mappings to LE category items Signed-off-by: CRob <[email protected]> Co-authored-by: Eddie Knight <[email protected]>
ossf · Jan 17, 2025 · 9008ec0 · 9008ec0
1 parent a1ac321
commit 9008ec0
Showing 1 changed file with 18 additions and 4 deletions.
diff --git a/baseline/OSPS-LE.yaml b/baseline/OSPS-LE.yaml
@@ -29,7 +29,10 @@ criteria:
       commit the associated contributions on every
       commit. Use a status check to ensure the
       assertion is made.
-    control_mappings: # TODO
+    control_mappings: 
+      BPB: B-S-1
+      CRA: 1.2b, 1.2f
+      SSDF: PO3.2, PS1, PW1.2, PW2.1
     security_insights_value: # TODO
 
   - id: OSPS-LE-02
@@ -59,7 +62,11 @@ criteria:
       Releasing to the public domain (e.g., CC0)
       meets this criterion if there are no
       other encumbrances (e.g., patents).
-    control_mappings: # TODO
+    control_mappings: 
+      BPB: B-B-6, B-B-7
+      CRA: 1.2b
+      SSDF: PO3.2
+      CSF: GV.OC-03
     security_insights_value: # TODO
 
   - id: OSPS-LE-03
@@ -81,7 +88,10 @@ criteria:
       directory to provide visibility and clarity
       on the licensing terms. The filename MAY
       have an extension.
-    control_mappings: # TODO
+    control_mappings: 
+      BPB: B-B-8
+      CRA: 1.2b
+      SSDF: PO3.2
     security_insights_value: # TODO
 
   - id: OSPS-LE-04
@@ -111,5 +121,9 @@ criteria:
       Note that the license for the released
       software assets may be different than the
       source code.
-    control_mappings: # TODO
+    control_mappings: 
+      BPB: B-B-6, B-B-7
+      CRA: 1.2b
+      SSDF: PO3.2
+      CSF: GV.OC-03
     security_insights_value: # TODO