https://www.securecoding.cert.org/confluence/display/seccode/CERT+Secure+Coding+Standards
Looks pretty good to me, but it's beyond my competence to judge. I'd be very interested in what experienced OBSD developers make of it. I've always kinda wished they would put together a guide to secure/quality coding (yes, I'm lazy); maybe the CERT stuff is close enough? Thanks, gregg