Update security-governance preset to v0.3.0

[hindermath]

Preset Update

Preset Name: Security Governance
Preset ID: security-governance
Version: 0.3.0
Repository: https://github.com/hindermath/spec-kit-preset-security-governance

This updates the existing community catalog entry from v0.2.0 to v0.3.0. It is a follow-up to #2386.

Summary

• Point security-governance to the v0.3.0 tag archive.
• Update the catalog description and tags for SBOM/AI-SBOM, G7/BSI AI-SBOM target evidence, SSDF, VEX, SLSA, CWE Top 25, and CRA coverage.
• Update the Community Presets table so the visible description matches the new preset scope.

Checklist

• Valid preset.yml manifest in the standalone preset repo
• README.md with description and usage
• LICENSE file included
• GitHub release created for v0.3.0
• Tag ZIP download URL reachable
• Added/updated presets/catalog.community.json
• Updated row in docs/community/presets.md

Verification

• python3 -m json.tool presets/catalog.community.json
• curl -fsSL -I https://github.com/hindermath/spec-kit-preset-security-governance/archive/refs/tags/v0.3.0.zip returned the GitHub redirect and final 200 from codeload.
• gh release view v0.3.0 --repo hindermath/spec-kit-preset-security-governance --json tagName,name,isDraft,isPrerelease,url verified the release is not draft and not prerelease.
• uv run --with pytest pytest tests/test_presets.py -k catalog passed: 46 passed, 200 deselected.

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Updates the community catalog entry for the Security Governance preset to reflect its new release metadata and expanded scope, and aligns the community presets documentation accordingly.

Changes:

• Bumped security-governance preset version to 0.3.0 and updated its download URL.
• Expanded the preset description/tags and refreshed updated_at timestamps in the catalog.
• Updated the docs table entry to match the preset’s updated capabilities.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
presets/catalog.community.json	Updates security-governance version/URL/description/tags and timestamps in the community preset catalog.
docs/community/presets.md	Updates the Security Governance row description in the community presets list.

Comments suppressed due to low confidence (1)

docs/community/presets.md:1

• This row appears to include a stray leading 26 before the table row (|| Security Governance). That will break the markdown table formatting/rendering. Remove the extra 26 so the row begins consistently with || like the surrounding entries.

# Community Presets

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[hindermath]

Hi @mnriem,

this is a small follow-up to the already merged security-governance community preset entry from #2386.

The standalone preset has been updated and released as v0.3.0:

https://github.com/hindermath/spec-kit-preset-security-governance/releases/tag/v0.3.0

This PR updates the existing Spec Kit community catalog entry from v0.2.0 to v0.3.0 and reflects the new AI-SBOM scope in the catalog metadata and community preset table.

Main update:

• adds SBOM/AI-SBOM supply-chain transparency wording
• adds G7/BSI AI-SBOM target evidence wording
• keeps the preset in the existing security-governance catalog entry

The PR is ready from my side and waiting for maintainer review/approval when you have time.