OpenSSF Open Source Project Security Baseline (OSPS Baseline)
QA: Quality – OpenSSF Open Source Project Security Baseline (OSPS Baseline)

OpenSSF Open Source Project Security Baseline (OSPS Baseline) OSPS-QA-06.03: OSPS-QA-06.03 Use Automated Testing in CI/CD Pipelines

OSPS-QA-06 Use Automated Testing in CI/CD Pipelines (maturity level 3). Requirement: The project documentation MUST include a policy that all major changes to the software produced by the project should add or update tests of the functionality in an automated test suite. Objective of the control: Ensure that the project uses at least one automated test suite for the source code repository and clearly documents when and how tests are run. Recommendation: Add a section to the contributing documentation that explains the policy for adding or updating tests. The policy should explain what constitutes a major change and what tests should be added or updated.

Maintained by Gerard Blokdyk

Other controls in QA: Quality – OpenSSF Open Source Project Security Baseline (OSPS Baseline)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.