Improved Static Analysis

bcgov / digital_marketplace

The intent of this development is to build a product that will support digital procurement needs for the BC Government including services such as, but not limited to, Sprint With Us, Code With Us, The Procurement Concierge.

Apache License 2.0

13 stars 17 forks source link

Improved Static Analysis #234

Open wenzowski opened 2 years ago

wenzowski commented 2 years ago

Per comment in #193, why don't we consider reviewing Rule 9 of the OWASP Docker Security Cheat Sheet to further augment our existing linting and static analysis guardrails?

BCerki commented 2 years ago

Do this after we have docker builds running on CI