13 docs tagged with "FOSS Contribution"

Enforcement actions taken after a failed FOSS contribution evaluation.

Passing evaluation log for a company-interest-major FOSS contribution.

Failed evaluation log for a company-moderated FOSS contribution.

System capabilities that create FOSS contribution attack surface.

Controls with assessment requirements for FOSS contribution governance.

Guideline statements adapted from the FOSS contribution guidelines.

Controlled vocabulary for FOSS contribution governance terms.

Gemara policy for employee FOSS contribution, including assessment plans.

Foundational principles for employee FOSS contribution.

Organizational risks linked to FOSS contribution threats.

Threats arising from employee contribution to Free and Open Source Software.

Contribution pathways through which FOSS threats may be realized.

Actions that might introduce risk—the hinge between definition and measurement.