Add an FAQ

[funnelfiasco]

You've got questions, we've gotll come up with answers. I shared a doc in Slack (it's globally writable, so I didn't want to put it here 😅 ) to start working on this. Once we've settled on the general answers, I'll add it to the website.

Questions I've collected so far:

• What’s the purpose of the OSPS Baseline?
• How is the OSPS Baseline different from OpenSSF Scorecard and the Best Practices Badge?
• What OSPS Baseline level am I required to meet?
• How can I prove my project complies with the OSPS Baseline?
• How can I verify an upstream project’s compliance with the OSPS Baseline?
• Does OSPS Baseline compliance expire?

If you have other questions, add them as comments!