Update OSPS-GV.yaml to add missing maturity levels

adding missed lvl2 & 3 on a lvl1 requirement for completeness

Signed-off-by: CRob <[email protected]>

Author: SecurityCRob

baseline/OSPS-GV.yaml

@@ -126,6 +126,8 @@ controls:
           of the contribution process.
         applicability:
           - Maturity Level 1
+          - Maturity Level 2
+          - Maturity Level 3
         recommendation: |
           Create a CONTRIBUTING.md or CONTRIBUTING/ directory to outline the
           contribution process including the steps for submitting changes, and
@@ -184,4 +186,4 @@ controls:
           granted escalated permissions to sensitive resources, such as merge
           approval or access to secrets. It is recommended that vetting includes
           establishing a justifiable lineage of identity such as confirming the
-          contributor's association with a known trusted organization.
+          contributor's association with a known trusted organization.