Configure Repo Settings

[r-bartlett-gsa]

As a Challenge.gov repo administrator and developer, in order to improve the safety of the code, ease of administration and work efficiency, I would like to update the settings on the Challenge_gov and challenges-and-prizes repositories.

Acceptance criteria:

• [x] Create issue templates (bug, user stories and DOD)
• [x] Create PR templates
• [x] Configure automation for both challenge.gov repos:
  • [x] Configure automations for dependabot alerts or PRs
  • [x] Enable and configure appropriate security testing automations, alerts and reporting (see TTS Handbook Security Section)
  • [x] Per GSA org requirements: "Conduct static code analysis with a scanning tool (if available). SonarQube is approved as a standard. "
  • [x] Configure workflow automations for teams-based review/approval
  • [x] Configure requirements for code reviews/approvals to allow merging
  • [x] Configure stale branch cleanup
• [x] GH integration with Slack channel for work updates
• [x] Create user teams with permissions for specific workflows
  • [x] Ensure the team's accounts are setup correctly per TTS handbook
• [x] Update devconfig/readme files to accurately represent current system architecture and dependencies
• [x] Create / update documentation on branch titles for both repos
  • [x] Standardize dev / staging / main branch setup and titles for both repos
• [x] Implement processes for ensuring appropriate handling of sensitive information in issues and code, see Protecting TTS Systems
• [x] ~Setup/plan for (create backlog items) any other items identified as part of Technical Discovery~
• [x] ~Update Configuration Management Plan accordingly~, see #1316

[r-bartlett-gsa]

@kkrug Can we please make one additional change to the PR template: If applicable, GH issues are assigned to the PR, under Development section on the right hand side.

[r-bartlett-gsa]

@kkrug / @jdonis In regards to automated testing, there are a few open PRs for Snyk security upgrades from May. Do we need to do anything about those? https://github.com/GSA/Challenge_gov/pulls