OWASP / OWASP/DevSecOpsGuideline
Software Composition Analysis & Supply Chain Risk Management
Open
@mostafa is already working on this.
Since Jun 28, 2022.
documentation
enhancement
- Dominant language
- Python
- Stars
- 1.1k
- Forks
- 262
- PR merge metrics
- No merged PRs in 30d
Description
Hey!
I see that the SCA is a little bit less developed than other parts of the doc, so I'd be happy to expand on this to include various techniques, technologies, tools, and workflows on how this is done in a real-world scenario. Let me know if that's what you're interested in. I also gave a talk about it here.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.