-
Notifications
You must be signed in to change notification settings - Fork 14
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
allstar usecase(#21) #29
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think the file name should be just recommendation-allstar.md
.
@cartersocha, @codeboten, I'm missing some context for this PR. Do we need this here at all? Or do we need a doc describing our specific allstar setup?
sig-allstar.md
Outdated
@@ -0,0 +1,31 @@ | |||
## SIG Security's use of Allstar for the OpenTelemetry(OTEL) project | |||
|
|||
Allstar is a security policy engine that helps organizations automate and enforce security best practices. It can be used to scan code, dependencies, and infrastructure for vulnerabilities. It can also be used to enforce best practices for code reviews, security testing, and vulnerability management. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you add a link to allstar?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
sure, will include it right away
Co-authored-by: Juraci Paixão Kröhling <[email protected]>
Hello @jpkrohling @cartersocha @codeboten |
Sorry, but after reviewing #21 again, I don't think it was meant to be an entry on the recommendations. From @codeboten's message on that issue:
|
Okay, this is my progress on this so far; |
Thanks for the work @EjiroLaurelD, I think the details you've captured here in this PR could be added to the original issue in a comment or as @jpkrohling in a separate google doc. Can this other PR be closed in favour of this current one? |
Okay thank you, I will add my progress detail as a comment on the parent issue.
Yes please, we can close this PR. |
Hello @jpkrohling
I have made the recommend changes to my initial pr and also created a new branch.
I wrote the document to outline how SIG security members use Allstar. Please let me know your thoughts on it.
Thank you for your time