diff --git a/profiles/github/openssf_security_baseline.yaml b/profiles/github/openssf_security_baseline.yaml index ce4574a..88106b1 100644 --- a/profiles/github/openssf_security_baseline.yaml +++ b/profiles/github/openssf_security_baseline.yaml @@ -46,7 +46,7 @@ repository: # Check for an dependency policy entry in the security insights file. - type: security_insights_dep_policy name: security_insights_dep_policy - displayName: "Check for a dependency polcicy in the Security Insights file." + displayName: "Check for a dependency policy in the Security Insights file." def: filename: SECURITY-INSIGHTS.yml diff --git a/rule-types/github/security_policy.yaml b/rule-types/github/security_policy.yaml index b89d1c2..ef15b61 100644 --- a/rule-types/github/security_policy.yaml +++ b/rule-types/github/security_policy.yaml @@ -8,6 +8,9 @@ context: description: Raise an alert if a repository is missing a security policy file. guidance: | Ensure that a repository has a security policy file + + For more details on security policies on GitHub, see + https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository def: in_entity: repository rule_schema: