IAM

We use gitlab, https://gitlab.com/dadangnh/iam

We use issue tag on Gitlab Issue tp identify this. https://gitlab.com/dadangnh/iam/-/issues

We use Gitlab Account and enforce user to use 2FA

We use 2FA by Google Auth

We use Symfony Coding Standard https://symfony.com/doc/current/contributing/code/standards.html and check it on every merge request

Yes, please see: https://gitlab.com/dadangnh/iam/-/merge_requests

We use docker to make the build easier for everyone, please see: https://gitlab.com/dadangnh/iam/-/blob/master/docker-compose.yml

Please see: https://gitlab.com/dadangnh/iam/-/blob/master/.gitlab-ci.yml

Yes, Please see: https://gitlab.com/dadangnh/iam/-/blob/master/.gitlab-ci.yml

We use Gitlab CI for automated test

Yes, we use the Gitlab CI and it can detect the coverage

Yes, please see the web server config at https://gitlab.com/dadangnh/iam/-/blob/master/docker/caddy/Caddyfile or https://gitlab.com/dadangnh/iam/-/blob/master/docker/nginx/nginx.conf

Yes, please see the web server config at https://gitlab.com/dadangnh/iam/-/blob/master/docker/caddy/Caddyfile or https://gitlab.com/dadangnh/iam/-/blob/master/docker/nginx/nginx.conf

Found all required security hardening headers. https://gitlab.com/dadangnh/djp-iam/-/security/dashboard

Yes, we use Gitlab review https://gitlab.com/dadangnh/iam/-/security/vulnerability_report

The software generate token for authentication, so the token is encrypted as part of the hardening mechanism. https://gitlab.com/dadangnh/iam/-/security/dashboard

We use Gitlab SAST and DAST for Static Analysis and Dynamic Analysis. Furthermore, we also implement code scanner by deepsource and codacy to improve the safe coding.