Google announces the Allstar GitHub app for continuous enforcement of best security practices

guest · Aug 12, 2021

Google announces the Allstar GitHub app for continuous enforcement of best security practices
August 11, 2021
https://siliconangle.com/2021/08/11...ntinuous-enforcement-best-security-practices/

Google LLC debuted the Allstar GitHub application today, enabling what it calls automated continuous enforcement of security best practices in GitHub projects.

The new app works by enabling project owners on the GitHub code repository to check for security policy adherence, set desired enforcement actions and then continuously enforce those policies when they’re triggered, for example by a setting or a file change in the project’s repository.
The Allstar app is a companion to another Google-backed, open-source tool called Scorecards, which automatically assesses risks to any GitHub repository and its dependencies.
Click to expand...

As Mike Maraya, Google’s senior program manager for security, and Google scholar Jeff Mendoza wrote in a co-authored blog post, Scorecards is used to check key heuristics such as whether or not a project uses branch protection, cryptographically signs release artifacts or requires code review. It generates scores for each category to help users understand which areas might need improvement.
Click to expand...

OpenSSF: Introducing the Allstar GitHub App

Log in or Sign up

Google announces the Allstar GitHub app for continuous enforcement of best security practices

guest Guest

Log in or Sign up

Google announces the Allstar GitHub app for continuous enforcement of best security practices

guest Guest

Useful Searches