Ezequiel
Ezequiel
Consolidation of some, and deletion of what could be duplication
Some added context and clarification around the definitions of green/amber
So this is a semi-PR for the time being, just to gauge whether the format works. I've put in possible new headings, and have re-formatted two of the checks. Although...
Also: we have minimum dashboard scores for *public* repos - what about *private* repos? How much do we trust private repos to be and remain private? _Originally posted by @andyblundell...
Also: GitHub community settings: e.g. having a parent readme, having a published position on accepting contributions, having a license, etc? Should we insist these are all present? _Originally posted by...
Also: can we get a split of repos by directorate, say? Does enterprise give us better options for grouping/classifying repos? What about tagging repos by business area? (The list is...
Also: should we agree a (high bar) minimum dashboard score for *all* new projects, whether public or private? E.g. why wouldn't we insist green for secret scanning etc before a...
Another thought: we should mention the NHSD org-level config, e.g. private repos are hidden from org members, and how this relates to the repo-level config teams need to apply _Originally...
Some other thoughts: 1. UK residency option should be used for NHS repos 2. User accounts should be work accounts (not sure if we should mention SSO or not) 3....
I think it would be useful to be able to offer some enterprise governance around CI/CD approach If we can document our thinking around this area with some example use...