Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rebrand aligment #22

Merged
merged 3 commits into from
Dec 18, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 8 additions & 8 deletions .github/workflows/sync_checks.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,12 +19,12 @@ jobs:
image: postgres:17.2
env:
POSTGRES_DB: dashboard
POSTGRES_USER: openjs
POSTGRES_USER: visionBoard
POSTGRES_PASSWORD: password
ports:
- 5432:5432
options: >-
--health-cmd="pg_isready -U openjs"
--health-cmd="pg_isready -U visionBoard"
--health-interval=10s
--health-timeout=5s
--health-retries=5
Expand All @@ -38,20 +38,20 @@ jobs:
git fetch origin chore/update-content || true
git checkout chore/update-content || git checkout -b chore/update-content

- name: Clone OpenJS Foundation Dashboard
- name: Clone visionBoard and import checks
run: |
git clone https://github.com/secure-dashboards/openjs-foundation-dashboard.git temp-openjs-dashboard
cd temp-openjs-dashboard
git clone https://github.com/OpenPathfinder/visionBoard.git temp-visionBoard
cd temp-visionBoard
npm install
npm run db:migrate
mkdir -p output
npm run db:export-checks
cp output/checks.json ../data/checks.json
cd ..
rm -rf temp-openjs-dashboard
rm -rf temp-visionBoard
env:
PGHOST: localhost
PGUSER: openjs
PGUSER: visionBoard
PGPASSWORD: password
PGDATABASE: dashboard

Expand All @@ -65,7 +65,7 @@ jobs:
git config user.name "GitHub Actions"
git config user.email "[email protected]"
git add -A
git diff --cached --quiet || git commit -m "chore: sync with OpenJS Foundation Dashboard"
git diff --cached --quiet || git commit -m "chore: sync with visionBoard Checks"

- name: Install Dependencies and update dynamic content
run: |
Expand Down
4 changes: 2 additions & 2 deletions .versionrc.json
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,6 @@
{"type": "perf", "hidden": true},
{"type": "test", "hidden": true}
],
"commitUrlFormat": "https://github.com/secure-dashboards/openjs-security-program-standards/commit/{{hash}}",
"compareUrlFormat": "https://github.com/secure-dashboards/openjs-security-program-standards/{{previousTag}}...{{currentTag}}"
"commitUrlFormat": "https://github.com/OpenPathfinder/website/commit/{{hash}}",
"compareUrlFormat": "https://github.com/OpenPathfinder/website/{{previousTag}}...{{currentTag}}"
}
6 changes: 3 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -43,8 +43,8 @@ Most of the content of this website is autogenerated with Github Actions, this i

### Update the compliance checks

1. Go to [Actions: Sync and update Compliance Checks](https://github.com/secure-dashboards/openjs-security-program-standards/actions/workflows/sync_checks.yml) and run the action manually from the `main` branch. [how-to](https://docs.github.com/en/actions/managing-workflow-runs-and-deployments/managing-workflow-runs/manually-running-a-workflow)
2. This will generate a PR with the title `[AUTO] Sync with dashboard database` and it will assign it to you ([direct access](https://github.com/secure-dashboards/openjs-security-program-standards/pulls?q=sort%3Aupdated-desc+is%3Apr+is%3Aopen++%5BAUTO%5D+Sync+with+dashboard+database+)). Please review the content and merge it when you feel ready.
1. Go to [Actions: Sync and update Compliance Checks](https://github.com/OpenPathfinder/website/actions/workflows/sync_checks.yml) and run the action manually from the `main` branch. [how-to](https://docs.github.com/en/actions/managing-workflow-runs-and-deployments/managing-workflow-runs/manually-running-a-workflow)
2. This will generate a PR with the title `[AUTO] Sync with dashboard database` and it will assign it to you ([direct access](https://github.com/OpenPathfinder/website/pulls?q=sort%3Aupdated-desc+is%3Apr+is%3Aopen++%5BAUTO%5D+Sync+with+dashboard+database+)). Please review the content and merge it when you feel ready.

### Manual update

Expand All @@ -59,7 +59,7 @@ This will autopolulate the details and implementations sections of the website,

### Improve the content via PR(s)

If you want to enhance any page, you can do so as you would in any other project (via a Pull Request, [example](https://github.com/secure-dashboards/openjs-security-program-standards/pull/9)). However, please note certain rules, as some parts of the files are dynamically generated, and your changes could be overwritten.
If you want to enhance any page, you can do so as you would in any other project (via a Pull Request, [example](https://github.com/OpenPathfinder/website/pull/9)). However, please note certain rules, as some parts of the files are dynamically generated, and your changes could be overwritten.

**Rules**
1. Metadata is added automatically. Manual additions or modifications to metadata are not allowed.
Expand Down
4 changes: 2 additions & 2 deletions data/checks.json
Original file line number Diff line number Diff line change
Expand Up @@ -1769,7 +1769,7 @@
"sources_description": "OpenSSF SCM Best PracticesOpenSSF Best Practices Badge Gold Level [require_2FA]",
"implementation_status": "completed",
"implementation_type": "computed",
"implementation_details_reference": "https://github.com/secure-dashboards/openjs-foundation-dashboard/issues/43",
"implementation_details_reference": "https://github.com/OpenPathfinder/visionBoard/issues/43",
"details_url": "https://openjs-security-program-standards.netlify.app/details/githubOrgMFA",
"created_at": "2024-12-11T23:03:52.941Z",
"updated_at": "2024-12-11T23:03:52.941Z"
Expand All @@ -1794,7 +1794,7 @@
"sources_description": "OpenSSF Best Practices Badge Passing Level [know_secure_design]",
"implementation_status": "completed",
"implementation_type": "manual",
"implementation_details_reference": "https://github.com/secure-dashboards/openjs-foundation-dashboard/issues/52",
"implementation_details_reference": "https://github.com/OpenPathfinder/visionBoard/issues/52",
"details_url": "https://openjs-security-program-standards.netlify.app/details/softwareDesignTraining",
"created_at": "2024-12-11T23:03:52.941Z",
"updated_at": "2024-12-11T23:03:52.941Z"
Expand Down
4 changes: 2 additions & 2 deletions docs/details/githubOrgMFA.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -19,12 +19,12 @@ Multi Factor Authentication (MFA) Enforced Across the Github Organization

## Dashboard Inclusion

We use the field `two_factor_requirement_enabled` from the GitHub Organization API to check if the project has enforced this policy. [More information](https://github.com/secure-dashboards/openjs-foundation-dashboard/issues/43)
We use the field `two_factor_requirement_enabled` from the GitHub Organization API to check if the project has enforced this policy. [More information](https://github.com/OpenPathfinder/visionBoard/issues/43)

<!-- DETAILS:START -->
## Details
- Implementation Status: completed
- Implementation Details: It is computed ([details](https://github.com/secure-dashboards/openjs-foundation-dashboard/issues/43)).
- Implementation Details: It is computed ([details](https://github.com/OpenPathfinder/visionBoard/issues/43)).
- C-SCRM: true
- Priority Group: P1
- Mitre: [CWE-308](https://cwe.mitre.org/data/definitions/308.html)
Expand Down
4 changes: 2 additions & 2 deletions docs/details/softwareDesignTraining.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -19,12 +19,12 @@ At least One Primary Maintainer has taken TBD Training on Secure Software Design

## Dashboard Inclusion

It is considered `passed` if there is a record for the organization in the `software_design_training` dashboard table and the date falls within the valid range (one natural year). This table is maintained manually, [more information](https://github.com/secure-dashboards/openjs-foundation-dashboard/issues/52)
It is considered `passed` if there is a record for the organization in the `software_design_training` dashboard table and the date falls within the valid range (one natural year). This table is maintained manually, [more information](https://github.com/OpenPathfinder/visionBoard/issues/52)

<!-- DETAILS:START -->
## Details
- Implementation Status: completed
- Implementation Details: It is manual ([details](https://github.com/secure-dashboards/openjs-foundation-dashboard/issues/52)).
- Implementation Details: It is manual ([details](https://github.com/OpenPathfinder/visionBoard/issues/52)).
- C-SCRM: false
- Priority Group: P0
- Mitre: [M1013](https://attack.mitre.org/mitigations/M1013/)
Expand Down
2 changes: 1 addition & 1 deletion docusaurus.config.js
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ const config = {
},
items: [
{
href: 'https://github.com/secure-dashboards/openjs-security-program-standards',
href: 'https://github.com/OpenPathfinder/website',
label: 'Repository',
position: 'right'
}
Expand Down
Loading