DevSecOps-MaturityModel

DevSecOps-MaturityModel copied to clipboard

fix: Remove incompatible version

1

Might be related to #261

wurstbrot

Separation of model and data

3

This touches on https://github.com/wurstbrot/DevSecOps-MaturityModel/issues/60, https://github.com/wurstbrot/DevSecOps-MaturityModel/issues/56, https://github.com/wurstbrot/DevSecOps-MaturityModel/issues/43, https://github.com/wurstbrot/DevSecOps-MaturityModel/issues/211. As a newcomer to the project it is somewhat hard to understand how to use it effectively and properly. One one hand, there's...

ivareri

The new teams assessment feature allows to use multiple teams. We have implemented it in angular. Angular requires the following in the `generated.yaml`: ``` teamsImplemented: A: false B: false ```...

wurstbrot

I would expect tests to reference elements by ID, and not order of appearance. The way tests are set up in https://github.com/wurstbrot/DevSecOps-MaturityModel/blob/master/src/app/component/task-description/task-description.component.spec.ts means all test must be changed if a...

ivareri

State or Tag for "Not yet assessed"

1

I'd like to throw a possible improvement in here for discussion: differentiation between features that you do not have and features that were not (yet) evaluated. Currently the only way...

LittlePrimate

Team-based assessment

7

wurstbrot

Comprehensive activity view

13

## I expect A comprehensive activity view 

ioggstream

Implementation View Browsing Issue

1

Mentioned by Jukka Lahtinen: We just did the DSOMM assessment with a project team. After this I exported the edited yaml from the “Implementation levels”-page. Unfortunately, the yaml to be...

wurstbrot

A NIST DevSecOps guidance project is currently underway. Some months ago I saw a newer draft, but now I can't find it. Project page: https://www.nccoe.nist.gov/projects/software-supply-chain-and-devops-security-practices Workshop: https://www.nccoe.nist.gov/get-involved/attend-events/nccoe-devsecops-workshop/overview Current Draft: https://www.nccoe.nist.gov/sites/default/files/2022-11/dev-sec-ops-project-description-final.pdf

martinmarsicano

Bumps [engine.io](https://github.com/socketio/engine.io) and [socket.io](https://github.com/socketio/socket.io). These dependencies needed to be updated together. Updates `engine.io` from 6.2.1 to 6.4.2 Release notes Sourced from engine.io's releases. 6.4.2 :warning: This release contains an important...

dependabot[bot]