From ee3c10646371d9edbfc1decc91be8fbdc5ef8145 Mon Sep 17 00:00:00 2001 From: Thorsten Hindermann Date: Fri, 22 May 2026 15:41:06 +0200 Subject: [PATCH] docs: update security-governance preset to v0.3.0 --- docs/community/presets.md | 2 +- presets/catalog.community.json | 21 +++++++++++++++------ 2 files changed, 16 insertions(+), 7 deletions(-) diff --git a/docs/community/presets.md b/docs/community/presets.md index ff7ec0f2ef..ff53b7b4ee 100644 --- a/docs/community/presets.md +++ b/docs/community/presets.md @@ -23,7 +23,7 @@ The following community-contributed presets customize how Spec Kit behaves — o | Multi-Repo Branching | Coordinates feature branch creation across multiple git repositories (independent repos and submodules) during plan and tasks phases | 2 commands | — | [spec-kit-preset-multi-repo-branching](https://github.com/sakitA/spec-kit-preset-multi-repo-branching) | | Pirate Speak (Full) | Transforms all Spec Kit output into pirate speak — specs become "Voyage Manifests", plans become "Battle Plans", tasks become "Crew Assignments" | 6 templates, 9 commands | — | [spec-kit-presets](https://github.com/mnriem/spec-kit-presets) | | Screenwriting | Spec-Driven Development for screenwriting/scriptwriting/tutorials: feature films, television (pilot, episode, limited series), and stage plays. Adapts the Spec Kit workflow to screenplay craft — slug lines, action lines, act breaks, beat sheets, and industry-standard pitch documents. Supports three-act, Save the Cat, TV pilot, network episode, cable/streaming episode, and stage-play structural frameworks. Export to Fountain, FTX, PDF | 26 templates, 32 commands, 1 script | — | [speckit-preset-screenwriting](https://github.com/adaumann/speckit-preset-screenwriting) | -| Security Governance | Adds secure development governance: memory-safe-language preference, secure code generation, NIST SSDF, CWE Top 25, OWASP ASVS, SBOM/VEX/SLSA, OpenSSF Scorecard, and EU CRA applicability | 12 templates, 3 commands | — | [spec-kit-preset-security-governance](https://github.com/hindermath/spec-kit-preset-security-governance) | +| Security Governance | Adds secure development governance: memory-safe-language preference, secure code generation, NIST SSDF, CWE Top 25, OWASP ASVS, SBOM/AI-SBOM, VEX/SLSA, OpenSSF Scorecard, G7/BSI AI-SBOM target evidence, and EU CRA applicability | 12 templates, 3 commands | — | [spec-kit-preset-security-governance](https://github.com/hindermath/spec-kit-preset-security-governance) | | Spec2Cloud | Spec-driven workflow tuned for shipping to Azure: spec → plan → tasks → implement → deploy | 5 templates, 8 commands | — | [spec2cloud](https://github.com/Azure-Samples/Spec2Cloud) | | Table of Contents Navigation | Adds a navigable Table of Contents to generated spec.md, plan.md, and tasks.md documents | 3 templates, 3 commands | — | [spec-kit-preset-toc-navigation](https://github.com/Quratulain-bilal/spec-kit-preset-toc-navigation) | | VS Code Ask Questions | Enhances the clarify command to use `vscode/askQuestions` for batched interactive questioning. | 1 command | — | [spec-kit-presets](https://github.com/fdcastel/spec-kit-presets) | diff --git a/presets/catalog.community.json b/presets/catalog.community.json index 7976730738..89124e082f 100644 --- a/presets/catalog.community.json +++ b/presets/catalog.community.json @@ -1,6 +1,6 @@ { "schema_version": "1.0", - "updated_at": "2026-05-05T10:00:00Z", + "updated_at": "2026-05-22T00:00:00Z", "catalog_url": "https://raw.githubusercontent.com/github/spec-kit/main/presets/catalog.community.json", "presets": { "a11y-governance": { @@ -472,11 +472,11 @@ "security-governance": { "name": "Security Governance", "id": "security-governance", - "version": "0.2.0", - "description": "Adds secure development governance, MSL preference, ASVS verification, supply-chain transparency, and EU CRA awareness.", + "version": "0.3.0", + "description": "Adds memory-safe-language preference, secure code generation, ASVS verification, SBOM/AI-SBOM supply-chain transparency, and EU Cyber Resilience Act awareness.", "author": "Thorsten Hindermann", "repository": "https://github.com/hindermath/spec-kit-preset-security-governance", - "download_url": "https://github.com/hindermath/spec-kit-preset-security-governance/archive/refs/tags/v0.2.0.zip", + "download_url": "https://github.com/hindermath/spec-kit-preset-security-governance/archive/refs/tags/v0.3.0.zip", "homepage": "https://github.com/hindermath/spec-kit-preset-security-governance", "documentation": "https://github.com/hindermath/spec-kit-preset-security-governance/blob/main/README.md", "license": "MIT", @@ -491,11 +491,20 @@ "security", "governance", "msl", + "ssdf", "asvs", - "supply-chain" + "supply-chain", + "sbom", + "ai-sbom", + "vex", + "slsa", + "cwe-top-25", + "g7", + "bsi", + "cra" ], "created_at": "2026-04-27T00:00:00Z", - "updated_at": "2026-04-27T00:00:00Z" + "updated_at": "2026-05-22T00:00:00Z" }, "spec2cloud": { "name": "Spec2Cloud",