Open pshiu opened 1 year ago
@magajh, added https://socket.dev/ recommendation by @jmbowman from this Slack thread to comment above.
Discovery document: https://openedx.atlassian.net/wiki/spaces/COMM/pages/3963420755/Discovery+Document+Integrating+Security+Suites+into+GitHub+CI+for+Open+edX
In alignment with the Next steps outlined in the document, I'm linking the issues that address each one of the points: https://github.com/openedx/wg-security/issues/41 (new) https://github.com/openedx/wg-security/issues/25 https://github.com/openedx/wg-security/issues/40 (new)
From OEP-60: https://open-edx-proposals.readthedocs.io/en/latest/processes/oep-0060-proc-sec-group.html#focus-on-proactive-security-improvements