Baseline: Enable binaries check

Signed-off-by: Adolfo García Veytia (Puerco) <[email protected]>
mindersec · Jul 26, 2024 · 35b59cd · 35b59cd
1 parent 772a794
commit 35b59cd
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/profiles/github/openssf_security_baseline.yaml b/profiles/github/openssf_security_baseline.yaml
@@ -74,10 +74,14 @@ repository:
     displayName: "Ensure there is a security policy file"
     def:
       filename: SECURITY.md
-
+
+  # No checked-in binaries
+  - type: no_binaries_in_repo
+    name: no_binaries_in_repo
+    displayName: "Ensure that there are no binaries checked in the repository"
+
   # (TODO) No vulnerabilities
   # (TODO) 60 day SLA on HIGH/MED vulnerabilities
-  # (TODO) No checked-in binaries
   # (TODO) SBOM generated with releases
   # (TODO) SBOM conforms to NTIA minimal elements
   # (TODO) Artifacts are signed