Automation-repetitive-task-software

遵循以下最佳实践的项目将能够自愿的自我认证,并显示他们已经实现了核心基础设施计划(OpenSSF)徽章。

如果这是您的项目,请在您的项目页面上显示您的徽章状态!徽章状态如下所示: 项目8239的徽章级别为gold 这里是如何嵌入它:

这些是黄金级别条款。您还可以查看通过白银级别条款。

        

 基本 5/5

  • 识别

    Tremendous automation repetitive task Sofware with the motive of contributing to what makes your day to day activities much easier and accessible for you at your work place.

  • 先决条件


    该项目必须拥有银级徽章。 [achieve_silver]

  • 项目监督


    项目必须具有2个或更多的“公交车因子”。 (需要网址) [bus_factor]

    Thank you for the opportunity to share the details about my work. However, I was able to acquire the Digital object identification badge through zenodo which makes all my research contributions and recognition attributed to me. The DOI provides a comprehensive bus factor where Bus factor was linked to my GitHub account through the zenodo website. URL: https://zenodo.org/records/10829824



    该项目必须至少有两个不相关的重要贡献者。 (需要网址) [contributors_unassociated]
  • 其他


    项目必须在每个源文件中包含许可证声明。这可以通过在每个文件开头附近的注释中加入以下内容来实现: SPDX-License-Identifier: [SPDX license expression for project][license_per_file]

    I added Apache License file for my project and it can be downloaded from my GitHub repository. https://github.com/KIDI-S-TECH/Automation-repetitive-task-software/blob/main/Apache%20license


  • 公开的版本控制的源代码存储库


    必须使用通用的分布式版本控制软件(例如,git,mercurial)作为项目的源代码存储库。 [repo_distributed]

    Repository on GitHub, which uses git. git is distributed.



    该项目必须清楚地识别新的或临时贡献者可以执行的小型任务。 (需要网址) [small_tasks]

    Yes a demo repository has been automated to ensure that any contributions or new user pass the test before proceeding to the next task on the project. URL: https://github.com/KIDI-S-TECH/demo-repository



    项目必须要求开发人员使用双因素身份验证(2FA)来更改中央存储库或访问敏感数据(如私密漏洞报告)。这种2FA机制可以使用没有密码学机制的方案,如SMS(短消息),尽管不推荐。 [require_2FA]

    The two-factor authentication (2fA) for developers for changing a central repository or accessing sensitive data. This was set up on the production stage of my project.



    项目的双因素身份认证(2FA)应该使用加密机制来防止仿冒。基于短消息服务(SMS)的2FA本身不符合此标准,因为它不被加密。 [secure_2FA]

    I understand the security protocols of 2FA and i used it on my project because my account on GitHub has a security layer that allows my account access to all my projects to pass through TOTP.


  • 编码标准


    该项目必须记录其代码检视需求,包括代码检视是如何进行的,必须检查的内容以及哪些是可接纳的内容。 (需要网址) [code_review_standards]

    This was met on my repository and can be seen on my project url. All code standard were created and implemented in a very simple way with the help of my own project and it’ll be more easier for users or first time users to understand what the project was built for. URL: https://github.com/KIDI-S-TECH/Automation-repetitive-task-software/blob/main/README.md



    该项目必须至少有50%的修改(作者之外的人提出的)在发布之前审查,以确定是否是一个有价值的修改,并且没有已知的问题,会反对其包含 [two_person_review]

    This was kinda met because it was hard finding someone who would audit my progress on my project. But it got over 950 clones with over 2k views on GitHub. With no issues or complaints from users However it was tested and modified for months before it was even released. So all production code and all the work was completed in a timely manner to ensure that the project will continue to grow and be successful.


  • 可工作的构建系统


    该项目必须具有可重复构建。如果没有发生构建(例如,直接使用源代码而不是编译的脚本语言),请选择“不适用”(N/A)。 (需要网址) [build_reproducible]

    Yes this project is reproducible build. Because it can also be accessed or produced new features directly from the source code from the release note. URL: https://github.com/KIDI-S-TECH/Automation-repetitive-task-software/archive/refs/tags/v3.zip


  • 自动测试套件


    测试套件必须以该语言的标准方式进行调用。 (需要网址) [test_invocation]

    An html file was used to test the code in a way it pass the automation test and then run the code to test or confirmation. It passed the test and was awarded an html passing badge URL: https://github.com/KIDI-STECH/demo-repository



    该项目必须实施持续集成,将新的或更改的代码经常集成到中央代码库中,并对结果进行自动化测试。 (需要网址) [test_continuous_integration]

    yes, it does. the link below is a great one to jump on in reference to how continuous integration the software can run when codes are changed frequently. though it depends on what was removed and replaced on my software. for more details on how to use, the link below will redirect to my README.md for proper review. https://github.com/KIDI-S-TECH/demo-repository



    如果有至少一个FLOSS工具可以以所选语言度量此条款,该项目的FLOSS自动测试套件必须具有至少90%语句覆盖率。 [test_statement_coverage90]

    CodeQL was used as. FlOSS automated test which validates all the tests or pull requests on the project and analyze all the data to determine how much data was collected from the project. And this measures its criterion in the selected language JavaScript



    如果有至少一个FLOSS工具可以以所选语言度量此条款,该项目的FLOSS自动测试套件必须具有至少80%分支覆盖率。 [test_branch_coverage80]

    The Floss automated test suite was done on the master branch on GitHub before pushing to the main branch. I used Git bash for my CI for continuous integration and Automation.


  • 使用基础的良好加密实践

    请注意,某些软件不需要使用加密机制。

    项目生成的软件必须支持所有网络通信的安全协议,如SSHv2或更高版本,TLS1.2或更高版本(HTTPS),IPsec,SFTP和SNMPv3。默认情况下,FTP,HTTP,Telnet,SSLv3或更早版本以及SSHv1等不安全协议必须被禁用,只有在用户专门配置时才启用。如果项目生成的软件不支持网络通信,请选择“不适用”(N/A)。 [crypto_used_network]

    My project supports the secure protocol for all of its network communication. The URL: https://github.com/KIDI-S-TECH/Automation-repetitive-task-software.git



    由项目生成的软件必须,如果支持或使用TLS,至少支持TLS版本1.2。请注意,TLS的前身称为SSL。如果软件不使用TLS,请选择“不适用”(N/A)。 [crypto_tls12]

    The project is been built under a secured domain name protocol HTTPS which allows users to access the network without having to worry about security. Also it supports all protocols for network communication. URL: https://github.com/KIDI-S-TECH/Automation-repetitive-task-software.git


  • 安全交付防御中间人(MITM)的攻击


    项目网站,存储库(如果可通过网络访问)和下载站点(如果单独)必须包括具有非允许值的密钥加固头。 (需要网址) [hardened_site]

    Found all required security hardening headers. Repository git website: https://github.com/KIDI-S-TECH/Automation-repetitive-task-software.git Normal website: https://github.com/KidiIT/Automation-repetitive-task-software My project follows the best practices of using a secure network protocol on the header packet. (HTTPS) the best part is that Man in the Middle attacks will find it hard to get any useful information when any secure connection or transaction is made in the server.


  • 其他安全问题


    该项目必须在过去5年内进行安全审查。此审查必须考虑安全需求和安全边界。 [security_review]

    This project was developed and launched last 6 months. So in this case all the security requirements was met and no issues were found or reported on the roadmap of the project.



    加固机制必须用于项目生产的软件,以便软件缺陷不太可能导致安全漏洞。 (需要网址) [hardening]

    MFA has been implemented on the project. Which allows me the owner to verify my identity in two or three ways before I could access some certain information on my project. This reduces security vulnerabilities and software defects https://github.com/KIDI-S-TECH/Automation-repetitive-task-software/blob/main/SECURITY.md


  • 动态代码分析


    必须在发布之前,至少将一个动态分析工具应用于软件任何候选发布的主要生产版本。 [dynamic_analysis]

    The software uses codeQL analysis tool which helps to keep the software updated to its latest version. Also with the help of the dependabot.yml plugin that was configured on the project also helps to keep the project updated to its latest version and release. URL: https://github.com/KidiIT/Automation-repetitive-task-software/releases



    项目应该在其生成的软件中包含许多运行时断言,并在动态分析期间检查这些断言。 [dynamic_analysis_enable_assertions]

    I configured a codeQL code analysis file and dependencies run that focus on every single Check run test on the project. After which it output the report with a debug terminal to debug the issue directly on the repository if the check failed.



此数据在知识共享署名3.0或更高版本许可证(CC-BY-3.0 +) 下可用。所有内容都可以自由分享和演绎,但必须给予适当的署名。请署名为KIDI'S-TECH和OpenSSF最佳实践徽章贡献者。

项目徽章条目拥有者: KIDI'S-TECH.
最后更新于 2023-12-25 23:03:33 UTC, 最后更新于 2024-05-31 18:18:13 UTC。 最后在 2024-05-02 15:25:30 UTC 获得通过徽章。

后退