From 5ee585b446df4eed0700810f134ddb9176625694 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 20:33:07 +0000 Subject: [PATCH] Update Security Governance preset to v0.6.2 Update security-governance preset submitted by @hindermath to: - presets/catalog.community.json (version, download_url, description, documentation, provides, tags, updated_at) - docs/community/presets.md community presets table Closes #4039 Assisted-by: GitHub Copilot (model: claude-sonnet-4.6, autonomous) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- docs/community/presets.md | 2 +- presets/catalog.community.json | 41 ++++++++-------------------------- 2 files changed, 10 insertions(+), 33 deletions(-) diff --git a/docs/community/presets.md b/docs/community/presets.md index bf204cfb75..ffe587573d 100644 --- a/docs/community/presets.md +++ b/docs/community/presets.md @@ -30,7 +30,7 @@ The following community-contributed presets customize how Spec Kit behaves — o | Parallel Autonomous Run Governance | Coordinates permission-bounded autonomous campaigns while preserving the project's learner and accessibility contract across workers and consolidation. | 9 templates, 5 commands, 2 scripts | autonomous-run-governance >=0.2.2; optional: intake-review-governance >=0.1.0 | [spec-kit-preset-parallel-autonomous-run-governance](https://github.com/hindermath/spec-kit-preset-parallel-autonomous-run-governance) | | Pirate Speak (Full) | Transforms all Spec Kit output into pirate speak — specs become "Voyage Manifests", plans become "Battle Plans", tasks become "Crew Assignments" | 6 templates, 9 commands | — | [spec-kit-presets](https://github.com/mnriem/spec-kit-presets) | | Screenwriting | Spec-Driven Development for screenwriting/scriptwriting/tutorials: feature films, television (pilot, episode, limited series), and stage plays. Adapts the Spec Kit workflow to screenplay craft — slug lines, action lines, act breaks, beat sheets, and industry-standard pitch documents. Supports three-act, Save the Cat, TV pilot, network episode, cable/streaming episode, and stage-play structural frameworks. Export to Fountain, FTX, PDF | 26 templates, 32 commands, 1 script | — | [speckit-preset-screenwriting](https://github.com/adaumann/speckit-preset-screenwriting) | -| Security Governance | Adds memory-safe-language and secure-coding governance, exact-head and security-gate evidence, provider-failure classification, ASVS, supply-chain transparency, and EU regulatory screening. | 14 templates, 3 commands | — | [spec-kit-preset-security-governance](https://github.com/hindermath/spec-kit-preset-security-governance) | +| Security Governance | Adds memory-safe-language and secure-coding governance, exact-head security evidence, ASVS, supply-chain transparency, EU regulatory screening, and provider-neutral model routing. | 15 templates, 3 commands | — | [spec-kit-preset-security-governance](https://github.com/hindermath/spec-kit-preset-security-governance) | | SicarioSpec Core | Baseline secure-by-default Spec Kit governance profile. | 5 templates | — | [sicario-spec](https://github.com/dfirs1car1o/sicario-spec) | | Spec2Cloud | Spec-driven workflow tuned for shipping to Azure: spec → plan → tasks → implement → deploy | 5 templates, 8 commands | — | [spec2cloud](https://github.com/Azure-Samples/Spec2Cloud) | | Table of Contents Navigation | Adds a navigable Table of Contents to generated spec.md, plan.md, and tasks.md documents | 3 templates, 3 commands | — | [spec-kit-preset-toc-navigation](https://github.com/Quratulain-bilal/spec-kit-preset-toc-navigation) | diff --git a/presets/catalog.community.json b/presets/catalog.community.json index 47a9a9d509..acc6449cb2 100644 --- a/presets/catalog.community.json +++ b/presets/catalog.community.json @@ -1,7 +1,6 @@ { "schema_version": "1.0", "updated_at": "2026-08-10T00:00:00Z", - "catalog_url": "https://raw.githubusercontent.com/github/spec-kit/main/presets/catalog.community.json", "presets": { "a11y-governance": { @@ -609,7 +608,7 @@ "documentation": "https://github.com/hindermath/spec-kit-preset-parallel-autonomous-run-governance/blob/v0.2.4/README.md", "license": "MIT", "requires": { -"speckit_version": ">=0.8.3" + "speckit_version": ">=0.8.3" }, "provides": { "templates": 9, @@ -692,52 +691,30 @@ "security-governance": { "name": "Security Governance", "id": "security-governance", - "version": "0.6.1", - "description": "Adds memory-safe-language and secure-coding governance, exact-head and security-gate evidence, provider-failure classification, ASVS, supply-chain transparency, and EU regulatory screening.", + "version": "0.6.2", + "description": "Adds memory-safe-language and secure-coding governance, exact-head security evidence, ASVS, supply-chain transparency, EU regulatory screening, and provider-neutral model routing.", "author": "Thorsten Hindermann", "repository": "https://github.com/hindermath/spec-kit-preset-security-governance", - "download_url": "https://github.com/hindermath/spec-kit-preset-security-governance/archive/refs/tags/v0.6.1.zip", + "download_url": "https://github.com/hindermath/spec-kit-preset-security-governance/archive/refs/tags/v0.6.2.zip", "homepage": "https://github.com/hindermath/spec-kit-preset-security-governance", - "documentation": "https://github.com/hindermath/spec-kit-preset-security-governance/blob/v0.6.1/README.md", + "documentation": "https://github.com/hindermath/spec-kit-preset-security-governance/blob/v0.6.2/README.md", "license": "MIT", "requires": { "speckit_version": ">=0.8.0" }, "provides": { - "templates": 14, + "templates": 15, "commands": 3 }, "tags": [ "security", "governance", - "msl", - "ssdf", - "asvs", - "supply-chain", - "sbom", - "ai-sbom", - "vex", - "slsa", - "cwe-top-25", "secure-coding", - "rust", - "go", - "swift", - "java", - "kotlin", - "python", - "typescript", - "g7", - "bsi", - "cra", - "cyber-resilience-act", - "nis2", - "ai-act", - "dora", - "regulatory" + "supply-chain", + "model-routing" ], "created_at": "2026-04-27T00:00:00Z", - "updated_at": "2026-07-23T00:00:00Z" + "updated_at": "2026-08-10T00:00:00Z" }, "sicario-core": { "name": "SicarioSpec Core",