microsoft / AzureDevOps-WSJF-Extension

Sample work item form extension that auto calculates WSJF (weighted shortest job first) per work item and stores it in a work item field
https://marketplace.visualstudio.com/items?itemName=MS-Agile-SAFe.WSJF-extension
MIT License
26 stars 37 forks source link

Security #61

Closed DrOnionMaster closed 3 months ago

DrOnionMaster commented 3 months ago

Curious if there is any validation on commits to this project such as malware checks?

AminTi commented 3 months ago

Hi , Thank you for your question. Yes, we have several validation measures in place for commits to this project, including checks for malware. These measures include:

Code Reviews: All commits are reviewed by experienced developers to ensure code quality and security. This peer review process helps in identifying and mitigating any suspicious changes.

Continuous Integration (CI): Our CI pipeline includes security checks that run every time code is committed. These checks help in early detection of any vulnerabilities or malware.

Dependency Management: We regularly update and scan our dependencies to prevent any known vulnerabilities from being introduced through third-party libraries.

By implementing these practices, we aim to maintain a secure and reliable codebase. If you have any further questions or suggestions, please feel free to let us know.