Update Security Plan and Security Management Plan

The security plan and security management plan shall be checked:
https://eclipse-score.github.io/score/main/platform_management_plan/index.html
https://eclipse-score.github.io/score/main/platform_management_plan/security_management.html

Consider Safety Management Plan and its work products as guidance

Check security plan (PMP, all plans) for security relevant topics and add, if required
Check Security Management Plan and adapt it according latest changes in Process Definition and according formal aspects, compare Safety Management Plan

Possible topics to consider, may create more sub-issue, if needed.
General: Add security relevant topics to any plan, if required
SBOM Generation: Tools?, including result of open source scans
Check SCA Tools and apply additional rules for security purposes
Fuzz Testing, etc. enhance Verification Plan, Software Development Plan
Enhance Release Plan, if applicable, etc.

@sunildevda

@sunildevda, currently the task cannot assigned to you

thanks. i will start working on this

@sunildevda

@sunildevda , @CryptoNutcase , so what is the status here, can you provide something for score release v0.8 or shall we shift it to future releases?

@masc2023

@masc2023 , CC: @CryptoNutcase had a discussion with Karthik and we cleaned up the task distribution. some points:

in the task description it is mentioned " Apply the method defined for Security Analysis on every level" this is a huge topic and should be tracked separately. Scope of this task is just plan update and not analysis. correct? if i understand it right this means we need to enforce all these security analysis and tool rollouts for SCORE.
regarding this task and other sub tasks for Karthik, v0.8 is feasible for me to complete this.
we have cleaned up the child tasks and linked directly to Epic. could you please edit this task description and remove the ones in red in below picture

@sunildevda

@sunildevda , @CryptoNutcase , can you please update the status for your contribution to v0.8? Currently I see now PR yet, so I assume, you will not contribute to v0.8 any more. PRs must be closed latest until next week friday.

@masc2023

@masc2023 please postpone my task to v0.9. I am sorry but i couldnt get time to work on this yet. and next week we have PI planning and this will further delay resuming on working of my PR.

Navigation Menu

Repository navigation

Update Security Plan and Security Management Plan #452

13 remaining items

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Update Security Plan and Security Management Plan #452

Description

Activity

masc2023 commented on Dec 12, 2025

sunildevda commented on Jan 9, 2026

13 remaining items

masc2023 commented on May 26, 2026

sunildevda commented on May 29, 2026

masc2023 commented on Jun 17, 2026

sunildevda commented on Jun 18, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions