Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[security] audit repository tooling #862

Closed
5 of 8 tasks
Tracked by #12
codeboten opened this issue Aug 21, 2023 · 2 comments
Closed
5 of 8 tasks
Tracked by #12

[security] audit repository tooling #862

codeboten opened this issue Aug 21, 2023 · 2 comments
Assignees
Labels

Comments

@codeboten
Copy link
Contributor

codeboten commented Aug 21, 2023

The security SIG is looking to ensure that security tooling is setup consistently across the organization. As a result, we're asking maintainers to ensure the following tools are enabled in each repository:

  • CodeQL enabled via GitHub Actions
  • Static code analysis tool (the collector uses govulncheck [https://pkg.go.dev/golang.org/x/vuln] on every build)
  • Repository security settings
    • Security Policy ✅
    • Security advisories ✅
    • Private vulnerability reporting ✅
    • Dependabot alerts ✅
    • Code scanning alerts ✅

Parent issue: open-telemetry/sig-security#12

@codeboten codeboten self-assigned this Aug 21, 2023
codeboten pushed a commit that referenced this issue Aug 21, 2023
codeboten pushed a commit that referenced this issue Aug 22, 2023
This was referenced Aug 23, 2023
Copy link

This issue was marked stale. It will be closed in 30 days without additional activity.

@github-actions github-actions bot added the Stale label Sep 21, 2024
Copy link

Closed as inactive. Feel free to reopen if this issue is still relevant.

@github-actions github-actions bot closed this as not planned Won't fix, can't repro, duplicate, stale Oct 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant