software-engineering-quality-framework

software-engineering-quality-framework copied to clipboard

Example implementations for "Monitor (and generate alerts for) the expiry dates of the SSL certificates within the service."

1

... in observability.md The principle says we need to monitor expiry dates: we have examples of how we do that: we should include them in this repo

andyblundell

I think it would be useful to be able to offer some enterprise governance around CI/CD approach If we can document our thinking around this area with some example use...

iw-ezequiel

We should add a library of endorsed/recommended GitHub actions, to save people having to find something where we already know of a decent solution For example https://github.com/NHSDigital/software-engineering-quality-framework/blob/master/.github/workflows/action.yml isn't specific to...

andyblundell

(Idea from Alex) For example, Azure-based services can use this to give insight into sustainability - https://azure.microsoft.com/en-gb/blog/microsoft-sustainability-calculator-helps-enterprises-analyze-the-carbon-emissions-of-their-it-infrastructure/

andyblundell

As per existing links to architecture principles, service manual, NCSC, etc

andyblundell

andyblundell

Principle to use the approved auth solutions

andyblundell

Add details for vaults, e.g. KMS

andyblundell

Ideas: - Summary/overview is long with a lot of detail, move some of that to specific sections - Break down basic requirements (e.g. logging, with meaningful logs) and advanced requirements...

iw-ezequiel

andyblundell