docs

func AcceptsVulnReports ¶

func AcceptsVulnReports(payload data.Payload) (result gemara.Result, message string, confidence gemara.ConfidenceLevel)

func DocumentsSecurityUpdatePolicy ¶ added in v0.28.0

func DocumentsSecurityUpdatePolicy(payload data.Payload) (result gemara.Result, message string, confidence gemara.ConfidenceLevel)

DocumentsSecurityUpdatePolicy evaluates OSPS-DO-05.01: once a project has made a release, its documentation must describe when releases or versions will no longer receive security updates.

The requirement is conditional on a release existing, so a project with no releases is NotApplicable rather than a failure. Security Insights' support-policy field is the explicit, machine-readable signal; a SUPPORT.md (or README "Support" section) is a weaker fallback that warrants review since its contents cannot be verified to describe a security-update timeline.

A present-but-empty support-policy field decodes to a non-nil *URL of "", so the value is trimmed rather than only nil-checked to avoid crediting an empty entry as documented policy.

func HasBuildInstructions ¶ added in v0.28.0

func HasBuildInstructions(payload data.Payload) (result gemara.Result, message string, confidence gemara.ConfidenceLevel)

func HasDependencyManagementPolicy ¶

func HasDependencyManagementPolicy(payload data.Payload) (result gemara.Result, message string, confidence gemara.ConfidenceLevel)

func HasIdentityVerificationGuide ¶

func HasIdentityVerificationGuide(payload data.Payload) (result gemara.Result, message string, confidence gemara.ConfidenceLevel)

func HasSignatureVerificationGuide ¶

func HasSignatureVerificationGuide(payload data.Payload) (result gemara.Result, message string, confidence gemara.ConfidenceLevel)

func HasSupportDocs ¶

func HasSupportDocs(payload data.Payload) (result gemara.Result, message string, confidence gemara.ConfidenceLevel)

func HasUserGuides ¶

func HasUserGuides(payload data.Payload) (result gemara.Result, message string, confidence gemara.ConfidenceLevel)