Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

devfile/library CNCF Defender tasks #1374

Closed
4 of 7 tasks
Tracked by #1297
maysunfaisal opened this issue Dec 6, 2023 · 1 comment · Fixed by devfile/library#199
Closed
4 of 7 tasks
Tracked by #1297

devfile/library CNCF Defender tasks #1374

maysunfaisal opened this issue Dec 6, 2023 · 1 comment · Fixed by devfile/library#199
Assignees
@thepetk
Labels
area/library Common devfile library for interacting with devfiles

Comments

@maysunfaisal
Copy link
Member

maysunfaisal commented Dec 6, 2023 •
edited by Jdubrick
Loading

Which area/kind this issue is related to?

/area library

Issue Description

As part of CNCF CLOMonitor report - https://clomonitor.io/projects/cncf/devfile, devfile/library repo has been tagged with the code-lite but i think it should be code and its checkset https://github.com/cncf/clomonitor/blob/main/data/cncf.yaml#L521

The list of checksets and their requirement can be found at https://clomonitor.io/docs/topics/checks/

  • Security / Code review
  • Security / Dangerous workflow
  • Security / Dependency update tool
  • Security / Maintained
  • Security / Insights
  • Security / Policy
  • Security / Binary artifacts
@openshift-ci openshift-ci bot added the area/api Enhancement or issue related to the api/devfile specification label Dec 6, 2023
@maysunfaisal maysunfaisal added area/library Common devfile library for interacting with devfiles and removed area/api Enhancement or issue related to the api/devfile specification labels Dec 6, 2023
@maysunfaisal maysunfaisal mentioned this issue Dec 6, 2023
Open
11 tasks
@maysunfaisal maysunfaisal moved this to Refinement in Devfile Project Dec 6, 2023
@michael-valdron
Copy link
Member

Wait for upcoming refinement call to review with @maysunfaisal

@Jdubrick Jdubrick moved this from Refinement to Backlog in Devfile Project Jan 4, 2024
@thepetk thepetk self-assigned this Feb 27, 2024
@thepetk thepetk moved this from Backlog to In Review 👀 in Devfile Project Mar 1, 2024
@thepetk thepetk mentioned this issue Mar 1, 2024
Merged
5 tasks
@github-project-automation github-project-automation bot moved this from In Review 👀 to Done ✅ in Devfile Project Mar 1, 2024
@thepetk thepetk mentioned this issue Mar 4, 2024
Merged
2 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@thepetk thepetk

Labels
area/library Common devfile library for interacting with devfiles
Projects
Devfile Project
Status: Done ✅
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Implement SECURITY-Insights.md thepetk/devfile-library
3 participants
@thepetk @michael-valdron @maysunfaisal