OpenSFF Best Practices Badge Program for Dashboard

afrittoli commented 2 years ago

Achieve the OpenSFF Best Practices Badge. Add the badge to the main project README.

afrittoli commented 1 year ago

FYI @tektoncd/dashboard-maintainers - anyone available to drive this to completion?

afrittoli commented 1 year ago

AlanGreene commented 1 year ago

Remaining sections:

[x] Basics
- The project MUST provide reference documentation that describes the external interface (both input and output) of the software produced by the project.
We have documentation for the Dashboard API + extensions, and the getting started tutorial describes the core features of the UI. Is this sufficient?
[x] Quality
- PR open to add golangci-lint https://github.com/tektoncd/dashboard/pull/2509, with our existing use of eslint for the JavaScript code this should satisfy the remaining requirements in this secion
[x] Analysis
- PR open to add CodeQL https://github.com/tektoncd/dashboard/pull/2508, this should satisfy the static code analysis items
- the remaining items in dynamic code analysis are then either N/A or unmet (but only suggested, e.g. fuzzing)

That should get us to 100% 🤞

tektoncd / dashboard