https://github.com/ossf/wg-orbit
ORBIT: Open Resources for Baselines, Interoperability, and Tooling
https://github.com/ossf/wg-orbit
Last synced: 4 months ago
JSON representation
ORBIT: Open Resources for Baselines, Interoperability, and Tooling
- Host: GitHub
- URL: https://github.com/ossf/wg-orbit
- Owner: ossf
- License: apache-2.0
- Created: 2025-04-16T19:33:26.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2025-12-18T17:55:17.000Z (6 months ago)
- Last Synced: 2025-12-22T14:56:31.886Z (6 months ago)
- Size: 35.2 KB
- Stars: 20
- Watchers: 6
- Forks: 4
- Open Issues: 11
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# OpenSSF ORBIT Working Group
**ORBIT**: Open Resources for Baselines, Interoperability, and Tooling
The ORBIT Working Group (WG) is a [Sandbox-level](https://github.com/ossf/tac/blob/main/process/working-group-lifecycle.md#to-become-sandbox) group within the [Open Source Security Foundation (OpenSSF)](https://openssf.org).
ORBIT exists to develop and maintain interoperable resources for the identification and presentation of security-relevant data. It provides a home for collaborative activities, best practice definitions, documentation, testing, integration, and other artifacts supporting the mission.
---
```mermaid
flowchart TD
BPB(OpenSSF
Best Practices Badge)
LFXInsights(LFX Insights
Security & Best Practices)
subgraph ORBIT Working Group
subgraph OSPS
Assessments(Security Assessments)
CopyPasta(Security CopyPasta)
Baseline(Security Baseline)
end
subgraph Gemara
GemaraSDK(Implementation SDK)
GemaraLexicon(GRC Engineering Lexicon)
GemaraSchemas(GRC Asset Schemas)
end
SecurityInsights(Security Insights)
subgraph Minder
MinderPlatform(Platform)
minder-rules(minder-rules)
end
pvtr[GitHub Repo
Privateer Plugin]
click pvtr "https://github.com/revanite-io/pvtr-github-repo?tab=readme-ov-file#readme"
end
BPB -->| references | Baseline
Baseline --> | references | Assessments & CopyPasta
MinderPlatform -->|evaluates| minder-rules
minder-rules -->|reads| SecurityInsights
GemaraSchemas -->| provides structure| Baseline
pvtr -->|reads | SecurityInsights
GemaraSDK -->|provides logic |pvtr
LFXInsights -->|uses |pvtr
Baseline -->| defines requirements | pvtr & minder-rules
GemaraLexicon -->| provides common language | OSPS
click LFXInsights "https://insights.linuxfoundation.org/"
click Assessments "https://github.com/ossf/security-assessments?tab=readme-ov-file#readme"
click Baseline "https://baseline.openssf.org"
click BPB "https://openssf.org/projects/best-practices-badge/"
click GemaraSDK "https://gemara.openssf.org/implementation/#go-sdk"
click GemaraSchemas "https://gemara.openssf.org/implementation/#layer-schemas"
click GemaraLexicon "https://gemara.openssf.org/lexicon/"
click SecurityInsights "https://github.com/ossf/security-insights?tab=readme-ov-file#readme"
click MinderPlatform "https://github.com/mindersec/minder?tab=readme-ov-file#readme"
click minder-rules "https://github.com/mindersec/minder-rules-and-profiles?tab=readme-ov-file#readme"
```
The group is open to participation from anyone who abides by the [Contributor Covenant Code of Conduct 2.0](https://www.contributor-covenant.org/version/2/0/code_of_conduct/) (OpenSSF member or not).
Review the WG's [mission and scope](CHARTER.md#1-mission-and-scope) for more details.
## Quick Start
1. Star this repository to stay updated
1. Review the [active technical initiatives](./CHARTER.md#active-technical-initiatives) to see where you can contribute
1. Join Slack and introduce yourself
1. Join a working group meeting
- [Add the ORBIT WG meeting to your calendar](https://calendar.google.com/calendar/u/0/r/eventedit/copy/NmxoMTUzc20wbG80MzQxNWY4NGJicHJuMm5fMjAyNTA1MDhUMTcwMDAwWiBzNjN2b2VmaHA1aTlwZmx0YjVxNjduZ3Blc0Bn)
- [Meeting Notes](https://docs.google.com/document/d/1Hf-SsjYaAvY2Nk_jJ2-aHMqgBi1qg7oIj3PJWsCEe0U/edit?tab=t.0#heading=h.omyjy2x7t74i)
## Governance
The WG is governed by a [Technical Steering Committee (TSC)](./CHARTER.md#2-technical-steering-committee) composed of the leads from the active technical initiatives.
Review the WG charter for information about [operational policies](./CHARTER.md#5-compliance-with-policies), [trademarks](./CHARTER.md#6-community-assets), and [intellectual property licensing](./CHARTER.md#7-intellectual-property-policy).