software-engineering-quality-framework icon indicating copy to clipboard operation
software-engineering-quality-framework copied to clipboard

🏎️ Shared best-practice guidance & tools to support software engineering teams

Results 81 software-engineering-quality-framework issues
Sort by recently updated
recently updated
newest added

Feedback from bs-select team. I've made the best-practices clearer. I've pointed out the MAIN benefit of using sonar default rules is that they are auto-updated and ongoingly curated by the...

Added file for dependency scanning using OWASP with SonarQube.

So this is a semi-PR for the time being, just to gauge whether the format works. I've put in possible new headings, and have re-formatted two of the checks. Although...

These are false negatives - it seems to be that docs.github now requires specific headers or it rejects with 403. Adding this to the checker's config file (rather than excluding...

_Secure the route to infrastructure: all access to infrastructure (production or otherwise) must be via a secured route, for example via a hardened bastion only accessible via a VPN (with...

For example, if using a SaaS tool for static-code analysis, it's unlikely to be ok for an outage on that SaaS product to break your pipelines such that you can't...

... as made famous by the Spotify model Raised on behalf of one of the staff networks

Uplift the review template: https://github.com/NHSDigital/software-engineering-quality-framework/tree/main/insights)/review-template.xlsx ... to reflect the DMAIC model: Define (Problem statement) what who when where how … Measure (expand on problem) Analyse (Root causes.. ask why ?)...

Would you be happy to include your Python code and configuration that could be helpful to others as part of the case study? _Originally posted by @stefaniuk in https://github.com/NHSDigital/software-engineering-quality-framework/pull/245#discussion_r809269443_