openssf/osps-baseline-to-opencre Mapping Document

openssf/osps-baseline-to-opencre

Cross-walk from the Open Source Project Security (OSPS) Baseline controls to OpenCRE. Each mapping asserts a "relates-to" relationship; strength, confidence-level, and rationale are left unset and should be added as the mappings are individually reviewed.

Published by OSPS Baseline Authors

Install

OCI v1.1

$grcli unpack --repository openssf/osps-baseline-to-opencre --tag v0.0.0-dev-671f23f

Coordinate: oci.grc.store/openssf/osps-baseline-to-opencre:v0.0.0-dev-671f23f
Manifest digest: sha256:aeba695d3c6c5b1e0acbe0f4c992a98415212ed3685c72b7a34f0d8f3ca8af9a

Provenance

1 layer

Digest	Media type	Size
000ce35614f1…	application/vnd.gemara.artifact.v1+yaml	6.5 KiB

Bundle config blob

{
  "bundle-version": "1.0",
  "gemara-version": "1.2.0",
  "metadata": {
    "provenance": {
      "buildDefinition": {
        "buildType": "https://grc.store/grcli/buildtype/v0",
        "externalParameters": {
          "artifact": {
            "id": "osps-baseline-to-opencre",
            "type": "MappingDocument"
          },
          "target": {
            "registry": "oci.grc.store",
            "repository": "openssf/osps-baseline-to-opencre",
            "tag": "v0.0.0-dev-671f23f"
          }
        },
        "internalParameters": {
          "CI": "true",
          "GITHUB_ACTIONS": "true",
          "GITHUB_ACTOR": "eddie-knight",
          "GITHUB_REF": "refs/heads/main",
          "GITHUB_REPOSITORY": "eddie-knight/security-baseline",
          "GITHUB_RUN_ATTEMPT": "1",
          "GITHUB_RUN_ID": "26617016306",
          "GITHUB_SHA": "671f23f015e4b0f6108ab8f82f0eba7f89d55dce",
          "GITHUB_WORKFLOW": "Publish to grc.store",
          "RUNNER_OS": "Linux"
        },
        "resolvedDependencies": [
          {
            "name": "/home/runner/work/_temp/staged/osps-to-opencre.yaml",
            "uri": "file:///home/runner/work/_temp/staged/osps-to-opencre.yaml",
            "digest": {
              "sha256": "000ce35614f1b615a211997554894b6f23df2291384580a9e63b6ce85e0be2f9"
            }
          },
          {
            "name": "source",
            "uri": "git+https://github.com/eddie-knight/security-baseline@671f23f015e4b0f6108ab8f82f0eba7f89d55dce",
            "digest": {
              "gitCommit": "671f23f015e4b0f6108ab8f82f0eba7f89d55dce"
            }
          }
        ]
      },
      "runDetails": {
        "builder": {
          "id": "https://github.com/eddie-knight/security-baseline/actions/runs/26617016306",
          "version": {
            "go": "go1.25.0",
            "go-arch": "amd64",
            "go-os": "linux",
            "grcli": "v0.2.2"
          }
        },
        "metadata": {
          "invocationId": "26617016306-1",
          "startedOn": "2026-05-29T03:57:19.605412941Z",
          "finishedOn": "2026-05-29T03:57:19.688717713Z"
        },
        "byproducts": [
          {
            "name": "osps-to-opencre.yaml",
            "digest": {
              "sha256": "000ce35614f1b615a211997554894b6f23df2291384580a9e63b6ce85e0be2f9"
            }
          }
        ]
      }
    }
  },
  "artifacts": [
    {
      "name": "osps-to-opencre.yaml",
      "type": "MappingDocument",
      "id": "osps-baseline-to-opencre",
      "role": "artifact"
    }
  ]
}

Renderer not enabled

A renderer for MappingDocument is not yet supported in this UI. The artifact is published and pullable via the coordinate above.