Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: include information for manual checks #37

Merged
merged 1 commit into from
Feb 13, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions docs/checks/assignCVEForKnownVulns.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@ This check is currently under development and not yet implemented. [Click here t
Ensure all known security vulnerabilities are issued a CVE
<!-- DESCRIPTION:END -->

## Dashboard Inclusion

We use the column `has_assignCVEForKnownVulns_policy` from the table `projects` to calculate the status, this column is populated using the [bulk importer](/docs/visionBoard/importers#bulk-importer). [More information](https://github.com/OpenPathfinder/visionBoard/issues/91)

<!-- DETAILS:START -->
## Details
- Default Category: coordinated vulnerability disclosure
Expand Down
4 changes: 4 additions & 0 deletions docs/checks/ciAndCdPipelineAsCode.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@ This check is currently under development and not yet implemented. [Click here t
Ensure all CI/CD steps are automated through pipelines defined as code
<!-- DESCRIPTION:END -->

## Dashboard Inclusion

We use the column `has_ciAndCdPipelineAsCode_policy` from the table `projects` to calculate the status, this column is populated using the [bulk importer](/docs/visionBoard/importers#bulk-importer). [More information](https://github.com/OpenPathfinder/visionBoard/issues/108)

<!-- DETAILS:START -->
## Details
- Default Category: source control
Expand Down
4 changes: 4 additions & 0 deletions docs/checks/consistentBuildProcessDocs.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@ This check is currently under development and not yet implemented. [Click here t
Ensure a consistent and automated build process is documented and followed
<!-- DESCRIPTION:END -->

## Dashboard Inclusion

We use the column `has_consistentBuildProcessDocs_policy` from the table `projects` to calculate the status, this column is populated using the [bulk importer](/docs/visionBoard/importers#bulk-importer). [More information](https://github.com/OpenPathfinder/visionBoard/issues/105)

<!-- DETAILS:START -->
## Details
- Default Category: github workflows
Expand Down
5 changes: 5 additions & 0 deletions docs/checks/defineFunctionalRoles.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,11 @@ This check is currently under development and not yet implemented. [Click here t
Define roles aligned to functional responsibilities
<!-- DESCRIPTION:END -->

## Dashboard Inclusion

We use the column `has_defineFunctionalRoles_policy` from the table `projects` to calculate the status, this column is populated using the [bulk importer](/docs/visionBoard/importers#bulk-importer). [More information](https://github.com/OpenPathfinder/visionBoard/issues/77)


<!-- DETAILS:START -->
## Details
- Default Category: user account permissions
Expand Down
4 changes: 4 additions & 0 deletions docs/checks/identifyModifiedDependencies.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@ This check is currently under development and not yet implemented. [Click here t
Ensure modified dependencies are uniquely identified and clearly distinguished from the original dependency
<!-- DESCRIPTION:END -->

## Dashboard Inclusion

We use the column `has_identifyModifiedDependencies_policy` from the table `projects` to calculate the status, this column is populated using the [bulk importer](/docs/visionBoard/importers#bulk-importer). [More information](https://github.com/OpenPathfinder/visionBoard/issues/111)

<!-- DETAILS:START -->
## Details
- Default Category: dependency inventory
Expand Down
4 changes: 4 additions & 0 deletions docs/checks/incidentResponsePlan.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@ This check is currently under development and not yet implemented. [Click here t
Establish clear communication and incident response plans
<!-- DESCRIPTION:END -->

## Dashboard Inclusion

We use the column `has_incidentResponsePlan_policy` from the table `projects` to calculate the status, this column is populated using the [bulk importer](/docs/visionBoard/importers#bulk-importer). [More information](https://github.com/OpenPathfinder/visionBoard/issues/90)

<!-- DETAILS:START -->
## Details
- Default Category: coordinated vulnerability disclosure
Expand Down
4 changes: 4 additions & 0 deletions docs/checks/machineReadableDependencies.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@ This check is currently under development and not yet implemented. [Click here t
Ensure a machine-readable list of all direct and transitive dependencies is available for the software
<!-- DESCRIPTION:END -->

## Dashboard Inclusion

We use the column `has_machineReadableDependencies_policy` from the table `projects` to calculate the status, this column is populated using the [bulk importer](/docs/visionBoard/importers#bulk-importer). [More information](https://github.com/OpenPathfinder/visionBoard/issues/110)

<!-- DETAILS:START -->
## Details
- Default Category: dependency inventory
Expand Down
4 changes: 4 additions & 0 deletions docs/checks/npmOrgMFA.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@ This check is currently under development and not yet implemented. [Click here t
Multi Factor Authentication (MFA) enforced across the npm organization(s)
<!-- DESCRIPTION:END -->

## Dashboard Inclusion

We use the column `has_npmOrgMFA_policy` from the table `projects` to calculate the status, this column is populated using the [bulk importer](/docs/visionBoard/importers#bulk-importer). [More information](https://github.com/OpenPathfinder/visionBoard/issues/64)

<!-- DETAILS:START -->
## Details
- Default Category: user authentication
Expand Down
4 changes: 4 additions & 0 deletions docs/checks/npmPublicationMFA.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@ This check is currently under development and not yet implemented. [Click here t
Publish to npm using an MFA-enabled account rather than single factor legacy or granular access tokens
<!-- DESCRIPTION:END -->

## Dashboard Inclusion

We use the column `has_npmPublicationMFA_policy` from the table `projects` to calculate the status, this column is populated using the [bulk importer](/docs/visionBoard/importers#bulk-importer). [More information](https://github.com/OpenPathfinder/visionBoard/issues/72)

<!-- DETAILS:START -->
## Details
- Default Category: service authentication
Expand Down
4 changes: 4 additions & 0 deletions docs/checks/orgToolingMFA.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@ This check is currently under development and not yet implemented. [Click here t
Multi Factor Authentication (MFA) enforced in all tools wherever technically feasible
<!-- DESCRIPTION:END -->

## Dashboard Inclusion

We use the column `has_orgToolingMFA_policy` from the table `projects` to calculate the status, this column is populated using the [bulk importer](/docs/visionBoard/importers#bulk-importer). [More information](https://github.com/OpenPathfinder/visionBoard/issues/65)

<!-- DETAILS:START -->
## Details
- Default Category: user authentication
Expand Down
4 changes: 4 additions & 0 deletions docs/checks/regressionTestsForVulns.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@ This check is currently under development and not yet implemented. [Click here t
Ensure regression tests cover at least 50% of bugs and 100% of security vulnerabilities
<!-- DESCRIPTION:END -->

## Dashboard Inclusion

We use the column `has_regressionTestsForVulns_policy` from the table `projects` to calculate the status, this column is populated using the [bulk importer](/docs/visionBoard/importers#bulk-importer). [More information](https://github.com/OpenPathfinder/visionBoard/issues/93)

<!-- DETAILS:START -->
## Details
- Default Category: code quality
Expand Down
4 changes: 4 additions & 0 deletions docs/checks/securityMdMeetsOpenJSCVD.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@ This check is currently under development and not yet implemented. [Click here t
Verify that Security.md complies with OpenJS CVD guidelines
<!-- DESCRIPTION:END -->

## Dashboard Inclusion

We use the column `has_securityMdMeetsOpenJSCVD_policy` from the table `projects` to calculate the status, this column is populated using the [bulk importer](/docs/visionBoard/importers#bulk-importer). [More information](https://github.com/OpenPathfinder/visionBoard/issues/87)

<!-- DETAILS:START -->
## Details
- Default Category: coordinated vulnerability disclosure
Expand Down
4 changes: 4 additions & 0 deletions docs/checks/softwareArchitectureDocs.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@ This check is currently under development and not yet implemented. [Click here t
Ensure the software architecture is clearly documented
<!-- DESCRIPTION:END -->

## Dashboard Inclusion

We use the column `has_softwareArchitectureDocs_policy` from the table `projects` to calculate the status, this column is populated using the [bulk importer](/docs/visionBoard/importers#bulk-importer). [More information](https://github.com/OpenPathfinder/visionBoard/issues/107)

<!-- DETAILS:START -->
## Details
- Default Category: code review
Expand Down
5 changes: 5 additions & 0 deletions docs/checks/upgradePathDocs.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,11 @@ This check is currently under development and not yet implemented. [Click here t
Ensure commonly used older versions are supported or an upgrade path is documented and provided
<!-- DESCRIPTION:END -->

## Dashboard Inclusion

We use the column `has_upgradePathDocs_policy` from the table `projects` to calculate the status, this column is populated using the [bulk importer](/docs/visionBoard/importers#bulk-importer). [More information](https://github.com/OpenPathfinder/visionBoard/issues/106)


<!-- DETAILS:START -->
## Details
- Default Category: vulnerability management
Expand Down
4 changes: 4 additions & 0 deletions docs/checks/useCVDToolForVulns.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@ This check is currently under development and not yet implemented. [Click here t
Ensure the project utilizes a CVD tool to privately receive and manage external vulnerability reports (e.g., HackerOne, GitHub PVR)
<!-- DESCRIPTION:END -->

## Dashboard Inclusion

We use the column `has_useCVDToolForVulns_policy` from the table `projects` to calculate the status, this column is populated using the [bulk importer](/docs/visionBoard/importers#bulk-importer). [More information](https://github.com/OpenPathfinder/visionBoard/issues/88)

<!-- DETAILS:START -->
## Details
- Default Category: coordinated vulnerability disclosure
Expand Down