Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 2 additions & 3 deletions .pre-commit-config.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,6 @@
repos:
- repo: https://github.com/uktrade/github-standards
rev: v1.1.2
rev: v1.2.1
hooks:
- id: validate-security-scan
- id: run-security-scan
- id: run-personal-data-scan
- id: run-security-scan
12 changes: 7 additions & 5 deletions SECURITY_CHECKLIST.md
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,8 @@ A set of github tags have been created at an organisation level, these must be a

## Apply the correct github security policy

**You must be an organisation administrator to apply this policy**

To add the new security policy, follow these instructions:

1. As an organisation administrator, navigate to the [security config page](https://github.com/organizations/uktrade/settings/security_products).
Expand Down Expand Up @@ -86,11 +88,11 @@ Internal contributors to the repository should review the [GitHub Safety Tips](h

To ensure correct governance of a repository, at least one steward must be added. This will usually be the most senior engineer on the team. To add a steward to a repository:

1. Open the `Collaborators and teams` settings page. The url for this is `https://github.com/uktrade/REPO_NAME/github-standards/settings/access`
1. Use the `Add people` button to open the people finder autocomplete box.
1. Find and click the user who is going to be a steward
1. On the Choose a role page, select the `Steward` role.
1. Repeat for any additional users who are going to be a steward
1. Open the `Collaborators and teams` settings page. The url for this is `https://github.com/uktrade/REPO_NAME/settings/access`
2. Use the `Add people` button to open the people finder autocomplete box.
3. Find and click the user who is going to be a steward
4. On the Choose a role page, select the `Steward` role.
5. Repeat for any additional users who are going to be a steward

## Review and limit maintainers with admin rights to the strict minimum

Expand Down