search

BONSAMURAIS / bonsai

Open source software for product footprinting.
https://bonsai.uno/
BSD 3-Clause "New" or "Revised" License
51 stars 4 forks source link

Clarify minimum security issues #11

Open tmillross opened 5 years ago

tmillross commented 5 years ago

Priority: High; Estimated person-hours: 5 Volunteer(s)/Candidate(s): None

Needs to cover topics such as access control, access monitoring, nefarious code injection, and other relevant security issues.

Relates to #10, copied from here with minimal editing for quality.

tngTUDOR commented 5 years ago

In terms of sw quality, we could require that static analysis such as bandit https://github.com/PyCQA/bandit are done as part of the Cont. Integration.