Open SonOfLope opened 7 months ago
this is already covered by Github Security applied to our sources:
I'd be more interested in seeing how we monitor these are turned on for all our repos and how we ensure that security alerts are followed up on systematically by developers.
this is already covered by Github Security applied to our sources:
I'd be more interested in seeing how we monitor these are turned on for all our repos and how we ensure that security alerts are followed up on systematically by developers.
Updated the issue to address this. Converted to an 'Epic' issue
As a DevOps team, we aim to enhance our security posture through systematic audits and swift response mechanisms to maintain secure software repositories. Our goal is to establish robust processes not only for monitoring and assessing security vulnerabilities but also for effective incident management using modern alerting systems. This comprehensive approach will ensure Authorization to Operate (ATO) and Security Assessment & Authorization (SA&A) readiness for our software products.
Goals
Desired Outcomes
By achieving these goals, we strengthen our software's defense against security threats and ensure a proactive stance in incident management and security assessments.