ossf / ossf/allstar

Add a gittuf policy

Open
#459 1 comment 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement help wanted needs design
Dominant language
Go
Stars
1.5k
Forks
152
Avg merge
1d 2h
Merged PRs (30d)
6

Description

Allstar could run gittuf across all repos in an org and alert any repos which gittuf does not pass.

cc @adityasaky I saw your presentation at the TAC meeting today, looks like a good fit!

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue names no files, tests, or entry points. Start by locating Allstar’s policy-checking flow and the integration boundary for running gittuf across organization repositories; done means repositories that fail gittuf are detected and alerted.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.