-
Notifications
You must be signed in to change notification settings - Fork 10
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allstar #22
Allstar #22
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Who's the audience for this? If this is for other maintainers, the last section doesn't seem relevant. If it's for other sig-security members, it would be good to use this to document how we use allstar.
@@ -0,0 +1,35 @@ | |||
I have investigated what Allstar is about, it's capabilities and how it aligns with the needs of this project as inidicated in the checklist in issue #12. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This shouldn't be written in the first person.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Okay, I will fix that. Thank you for pointing it out
@@ -0,0 +1,35 @@ | |||
I have investigated what Allstar is about, it's capabilities and how it aligns with the needs of this project as inidicated in the checklist in issue #12. | |||
## Allstar is a security policy engine that helps organizations automate and enforce security best practices. Allstar can be used to scan code, dependencies, andinfrastructure for vulnerabilities. Allstar can also be used to enforce best practices for code reviews, security testing, and vulnerability management. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This seems too verbose to be a title.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'll fix that now. thank you
As discussed on #21, I'm closing this one. |
Hello, my name is Laurel , an Outreachy applicant.
I have investigated what Allstar is about, it's capabilities and how it aligns with the needs of this project as indicated in the checklist in issue #12.
I found out that Allstar is a Security Policy for open source projects which can help to ensure that all repositories have a security policy, scan all repos for common vulnerabilities, enforce best practices for code reviews, and require security testing for all releases.
I have written a documentation which highlights;
How much of the checklist Allstar can cover
What items needs to be manually configured and
Proposed steps to enable Allstar across organizations.
Please let me know if i need to fix anything to make it a better contribution. Thank you