Self-hosted open source security validation workspace: approved scope, evidence and inde…