As a system included in the Bug Bounty, I want my source code to be in scope

[afeld]

@pburkholder pointed out that only some of the systems in scope for the Bug Bounty have their source code included:

https://hackerone.com/tts#scope

I don't see a reason not to include the source code for all systems that are in scope.

• [x] cloud.gov
  • https://github.com/cloudfoundry-community/uaa-credentials-broker
  • https://github.com/18F/cf-service-connect
  • https://github.com/18F/cg-uaa-extras
  • https://github.com/18F/cg-sandbox-bot
• [ ] https://github.com/GSA/search.digitalgov.gov and https://github.com/GSA/search-gov - waiting until early 2020

cc #60

[afeld]

@brittag checking on what cloud.gov repos should be in scope.

[JJediny]

https://github.com/18F/before-you-ship/pull/398

[afeld]

Closing as not actionable right now.