{
    "profile": {
        "uuid": "3dac9860-b44a-551f-aabe-aaf5bd631a04",
        "name": "OSPS Baseline — Maturity Level 2",
        "confidentiality": "Moderate",
        "integrity": "Moderate",
        "availability": "Moderate",
        "category": "Moderate",
        "isPublic": true
    },
    "mappings": [
        {
            "profileMappingId": 0,
            "controlId": 22138,
            "controlIdentifier": "OSPS-AC-01",
            "controlGuid": "26d63eec-b1a3-5798-ae9c-dfb2af8b635f",
            "controlTitle": "OSPS-AC-01 - Use MFA for Sensitive Actions",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22139,
            "controlIdentifier": "OSPS-AC-02",
            "controlGuid": "222d2a44-0677-5695-a657-36b6f56bda86",
            "controlTitle": "OSPS-AC-02 - Restrict Collaborator Permissions",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22140,
            "controlIdentifier": "OSPS-AC-03",
            "controlGuid": "35317812-6852-540c-b0c8-aa13890e41b6",
            "controlTitle": "OSPS-AC-03 - Protect the Primary Branch from Accidental Modification",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22141,
            "controlIdentifier": "OSPS-AC-04",
            "controlGuid": "c4b9688c-9808-57d2-a8bd-3c6731ff5491",
            "controlTitle": "OSPS-AC-04 - Enforce Least Privilege on CI/CD Pipelines",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22142,
            "controlIdentifier": "OSPS-BR-01",
            "controlGuid": "b2c66689-80a7-5389-af92-d3b7eb3c3527",
            "controlTitle": "OSPS-BR-01 - Prevent Untrusted Input When Building & Releasing",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22143,
            "controlIdentifier": "OSPS-BR-02",
            "controlGuid": "268f9d10-34d2-569a-99df-e765947daff4",
            "controlTitle": "OSPS-BR-02 - Assign Unique Version Identifiers",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22144,
            "controlIdentifier": "OSPS-BR-03",
            "controlGuid": "ac763dda-8c32-571e-a779-2211cf820850",
            "controlTitle": "OSPS-BR-03 - Use Encrypted Channels for Development & Release Activity",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22145,
            "controlIdentifier": "OSPS-BR-04",
            "controlGuid": "76de3761-1f10-5550-ba7c-c68c6553d7b3",
            "controlTitle": "OSPS-BR-04 - Publish Change Log With Release",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22146,
            "controlIdentifier": "OSPS-BR-05",
            "controlGuid": "2c1b1ef6-2ab2-54e9-83cf-74ea2cbb51bc",
            "controlTitle": "OSPS-BR-05 - Use Standardized Dependency Management Tools",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22147,
            "controlIdentifier": "OSPS-BR-06",
            "controlGuid": "122f898a-6fd2-5a9a-8db1-145629572e9a",
            "controlTitle": "OSPS-BR-06 - Include Signatures and Hashes With Release",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22149,
            "controlIdentifier": "OSPS-DO-01",
            "controlGuid": "1340249f-98db-5512-a2e2-1dafb8bb5a85",
            "controlTitle": "OSPS-DO-01 - Publish User Guides for Basic Functionality",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22150,
            "controlIdentifier": "OSPS-DO-02",
            "controlGuid": "4b8df165-c563-5e46-af0a-55e824b8f895",
            "controlTitle": "OSPS-DO-02 - Provide Mechanisms for Reporting Defects",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22154,
            "controlIdentifier": "OSPS-DO-06",
            "controlGuid": "f03d0532-5509-5a89-8e71-c765316b957f",
            "controlTitle": "OSPS-DO-06 - Publish Dependency Management Policy",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22155,
            "controlIdentifier": "OSPS-DO-07",
            "controlGuid": "eebbbfde-4e71-59ad-83ad-8c818345dd00",
            "controlTitle": "OSPS-DO-07 - Provide Instructions on How to Build From Source",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22156,
            "controlIdentifier": "OSPS-GV-01",
            "controlGuid": "a27fbe61-80f4-528f-8a6e-1f433245dccc",
            "controlTitle": "OSPS-GV-01 - Publish Project Roles and Responsibilities",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22157,
            "controlIdentifier": "OSPS-GV-02",
            "controlGuid": "92c49ee9-b2c5-54f2-8886-2d8c208c62a9",
            "controlTitle": "OSPS-GV-02 - Provide Public Discussion Mechanisms",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22158,
            "controlIdentifier": "OSPS-GV-03",
            "controlGuid": "d48c1598-ded2-5e25-bd5d-d4e539ae1286",
            "controlTitle": "OSPS-GV-03 - Publish Contribution Guide",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22160,
            "controlIdentifier": "OSPS-LE-01",
            "controlGuid": "ef6e8156-4afa-5db6-ab24-27e6162f6e4f",
            "controlTitle": "OSPS-LE-01 - Require Code Contributors to Assert Right to Commit",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22161,
            "controlIdentifier": "OSPS-LE-02",
            "controlGuid": "ab936bc4-9d7e-512f-86f1-8c61a7c88d3d",
            "controlTitle": "OSPS-LE-02 - Ensure Project Licenses are Fully Open Source",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22162,
            "controlIdentifier": "OSPS-LE-03",
            "controlGuid": "92d3d4d8-048b-5840-aa63-380c49615727",
            "controlTitle": "OSPS-LE-03 - Maintain and Release Licenses in a Well Known Location",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22163,
            "controlIdentifier": "OSPS-QA-01",
            "controlGuid": "04f127e6-17f8-564a-952f-d9db63a6ade5",
            "controlTitle": "OSPS-QA-01 - Publish Source Code and Change History",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22164,
            "controlIdentifier": "OSPS-QA-02",
            "controlGuid": "08c497a9-0d67-5702-b366-7bc0418c92cb",
            "controlTitle": "OSPS-QA-02 - Publish Software Dependencies",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22165,
            "controlIdentifier": "OSPS-QA-03",
            "controlGuid": "8983ae7e-5d35-5c0d-876e-aa0b7231a98e",
            "controlTitle": "OSPS-QA-03 - Address Pass/Fail Checks Before Accepting Changes",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22166,
            "controlIdentifier": "OSPS-QA-04",
            "controlGuid": "1cc4f571-4a52-5a63-9ad5-8ff223c96383",
            "controlTitle": "OSPS-QA-04 - Enforce Security Requirements on All Codebases",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22167,
            "controlIdentifier": "OSPS-QA-05",
            "controlGuid": "2d166c6b-d171-51f2-bcea-e7d7bd8afd0c",
            "controlTitle": "OSPS-QA-05 - Prevent Executables in the Codebase",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22168,
            "controlIdentifier": "OSPS-QA-06",
            "controlGuid": "ee3bd3ad-5902-5f4d-8add-6e51d347dedd",
            "controlTitle": "OSPS-QA-06 - Use Automated Testing in CI/CD Pipelines",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22170,
            "controlIdentifier": "OSPS-SA-01",
            "controlGuid": "a7eb7dfe-3205-542c-8672-3ac7a5de8308",
            "controlTitle": "OSPS-SA-01 - Publish Design Descriptions of System Actors and Actions",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22171,
            "controlIdentifier": "OSPS-SA-02",
            "controlGuid": "a95e096e-68ab-568f-be8f-315ebb1ce511",
            "controlTitle": "OSPS-SA-02 - Publish External Interface Descriptions",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22172,
            "controlIdentifier": "OSPS-SA-03",
            "controlGuid": "0ec9478c-b03d-54e5-8844-fc9493e12801",
            "controlTitle": "OSPS-SA-03 - Maintain a Project Security Assessment",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22173,
            "controlIdentifier": "OSPS-VM-01",
            "controlGuid": "5beaaf96-f3ca-57b2-b7a8-fe9f58d357a2",
            "controlTitle": "OSPS-VM-01 - Publish Coordinated Vulnerability Disclosure Policy",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22175,
            "controlIdentifier": "OSPS-VM-03",
            "controlGuid": "076da040-017f-56da-8cae-49933ec50916",
            "controlTitle": "OSPS-VM-03 - Maintain Private Vulnerability Reporting Process",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22176,
            "controlIdentifier": "OSPS-VM-04",
            "controlGuid": "45344993-a54d-5bef-8e38-343db1eef2b9",
            "controlTitle": "OSPS-VM-04 - Publish Discovered Vulnerabilities",
            "catalogId": 1049,
            "catalogGuid": "e73ace15-cd88-589d-a68e-3ef57cfd2e66",
            "catalogTitle": "OpenSSF OSPS Baseline v2026.02.19",
            "catalogUrl": "https://baseline.openssf.org/"
        }
    ],
    "exportDate": "",
    "exportVersion": "1.0"
}