Security - Githubissues

GSA / oasis-plus

1 stars 0 forks source link

Security #67

Open vickimcfadden opened 8 months ago

vickimcfadden commented 8 months ago

To establish production URL

[x] Give cloud.gov a heads-up when we're going live (after getting domain name)
[x] Cloud.gov will reach out to security and ask them to scan (could take 2 weeks)
[x] Cloud.gov will enable domain

ATU (Authority to Use)

[x] Fill out form / google doc
[x] Configure our repo to cloud.gov pages best practices
[x] Submit the doc to TTS Ops (John Jediny) that we have made change to our repo (could take 1 week)

jfredrickson5 commented 8 months ago

Submitted PR to add this repo to GSA's GitHub security policy enforcement: https://github.com/GSA/.allstar/pull/9

vickimcfadden commented 8 months ago

@mark-meyer @jfredrickson5 follow up with John tomorrow to figure out what the process steps are

jfredrickson5 commented 8 months ago

Submitted ATU document.

jfredrickson5 commented 8 months ago

Added a new ATU checklist item to this card based on the new form we have to submit for the web manager.

jfredrickson5 commented 8 months ago

For "Configure our repo to cloud.gov pages best practices", we only have one item left to implement, signed commits. Holding off on that one until we're sure all our previously unsigned commits are merged.

vickimcfadden commented 7 months ago

ATU form is still under development. Created a new card to do this for post MVP

klohman commented 7 months ago

@ekidenda @PowderD @smteague This one should be done. We created a new issue to track the ATU.

ekidenda commented 7 months ago

Okay, moving this to done per the notes by @klohman above. New issue ticket reviewed.