Security work (umbrella issue)
Open
p0
security
triage
- Dominant language
- TypeScript
- Stars
- 102
- Forks
- 25
- Avg merge
- 1d 4h
- Merged PRs (30d)
- 22
Description
- [x] write some steps as tasks or sub issues
- [x] [security: Do threat modelling #111](https://github.com/Azure/aks-desktop/issues/111) 8 weeks
- [x] repo: Tighten branch protections (no push to main etc)
- [x] openssf scorecard items have issues opened
- [x] Turn on CodeQL for code analysis
- [x] Add ossf best practice badge
- [x] Add ossf scorecard
See sub issues for estimates.
Contributor guide
Research direction
Review the completed checklist and follow the linked threat-modelling issue #111 and other sub-issues to determine whether any security work remains. Done is not defined beyond the listed items, which are all marked complete; confirm the umbrella issue is still needed before starting work.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 15/100