As a user, I should have confidence in the security of the site, so that I use it

[hannahkane]

Notes

Acceptance Criteria

• [ ]

Tasks

• [X] Generate a checklist based on unaccounted for items in Before You Ship
• [X] Enable protected branches for the project repository. on both fs-permit-platform/ fs-middlelayer-api @lauraGgit
• [x] add snyk badges to readme on fs-permit-platform @hannahkane
• [X] add snyk badges to readme on fs-middlelayer-api @hannahkane
• [X] ensure code climate setup on both repositories @lauraGgit
• [X] add beta

Definition of Done

• [ ] Code unit / e2e tested and comply with QWASP
• [ ] No new security vulnerabilities
• [ ] Internal team code review
• [ ] Documentation / readme.md / CircleCI updated
• [ ] Docker updated
• [ ] Compare finished design with mockup
• [ ] Usability tested

[lauraGgit]

Created #172 for system monitoring

[hannahkane]

@lauraGgit - did you mean to self-reference this ticket in your comment?

[lauraGgit]

This ticket?

[hannahkane]

Turns out I can't enable protected branches on fs-middlelayer-api, because I don't have the necessary permissions, so reassigning to @lauraGgit. master and dev branches of fs-permit-platform are already protected.

[hannahkane]

@lauraGgit - I tried to add snyk badges, but I'm getting an error. Looks like it's not detecting a valid manifest file in the root. Can you advise?

[lauraGgit]

I'm updating the settings on all of the repos so they should now be marked at open source. this code (with the repo names replaced should work now)

[lauraGgit]

Code climate static code analysis on both repos

[lauraGgit]

Moved to Done