search

cloud-native-security-controls / controls-catalog

Apache License 2.0
16 stars 7 forks source link

Add CNSWPv2 controls #33

Closed JonZeolla closed 3 months ago

JonZeolla commented 7 months ago

Overall I duplicated the CNSWP v1.0 entries, updated 1 control, and added 10 new ones for CNSWPv2, based on @pratiklotia's work in https://github.com/cloud-native-security-controls/controls-catalog/pull/21.

  1. Control 316 is the same as control 121 but with added details from the whitepaper in the Control Implementation column.
  2. Control 273 is new, recommending secure by default systems
  3. Control 322 is new; pointing to the SSCP and supply chain practices
  4. Controls 323-331 are new; regarding GitOps practices (a new section in v2)

The significant changes has to do with line endings. I ensured that any carriage returns were removed from the file endings and added a very simple linter to make sure this doesn't keep recurring - evidence that it works (i.e. fails when encountering \r\n line endings) in this pipeline and fixes in https://github.com/cloud-native-security-controls/controls-catalog/pull/33/commits/d4a1580fd5f790f7efe5c2a9656a8b9cea8891b8

JonZeolla commented 3 months ago

I'm going to merge this to keep things moving

PushkarJ commented 3 months ago

This is wonderful to see! Sharing the runs from recent merge that @JonZeolla shared on slack here for visibility

Prior run: https://github.com/cloud-native-security-controls/controls-catalog/actions/runs/6567874445 Latest run: https://github.com/cloud-native-security-controls/controls-catalog/actions/runs/8158458117