OSSSC-edu / supply-chain.github.io

Open source software security teaching material. Online at https://osssc-edu.github.io/supply-chain.github.io/
Other
2 stars 8 forks source link

set new structure #16

Open bbaudry opened 1 year ago

bbaudry commented 1 year ago

Set the structure of the site according to the following table of content. Include existing sections in the corresponding chapters

  1. Introduction (To be defined)

2.0 Open Source Software Fundamentals 2.1 Software Repositories 2.2 Package Managers 2.3 Dependencies

3.0 Supply Chain 3.1 SW Supply Chain attacks 3.2 SW Integrity 3.3 Reproducible Builds

4.0 Industry Perspective (Suggestion based on pdf doc) 4.1 Governance Setup 4.2 Consumption/Compliance 4.3 Standards and Definitions 4.4 Industry Examples

5.0 Legal Aspects 5.1 Basics of Software Copy Right and other forms of Protection 5.2 Basics of FOSS Licensing 5.3 Basics of Export Control

6.0 Security 6.1 Public Key Infrastructure 6.2 Web of Trust 6.3 Access Control

bbaudry commented 1 year ago

@cesarsotovalero : split the current package manager section into 2 to go in the fundamentals chapter

bbaudry commented 1 year ago

@konkalo : refactor the security chapter according to the table of content (chapter 6)

bbaudry commented 1 year ago

@cesarsotovalero takes 3.1 and 3.3 for 3.1 Supply Chains attacks, see https://github.com/chains-project/chains-sota/issues/4 https://circle.cloudsecurityalliance.org/HigherLogic/System/DownloadDocumentFile.ashx?DocumentFileKey=b88f20bd-88da-4255-86ac-d9ab95e46a5b

bbaudry commented 1 year ago

@Deee92 will refactor chapter 2