Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New Usage - Suggestion #361

Merged
merged 14 commits into from
Feb 8, 2025
Merged

Conversation

vbakke
Copy link
Collaborator

@vbakke vbakke commented Jan 27, 2025

I have created a new Usage, that focuses on the first time user, giving a brief overview.

I have split up the existing USAGE.md into /usage/maturity-level-0 and /usage/dimensions.

A demo can be seen at https://dsomm.pages.dev/usage/.

Any comments, approvals and improvements are welcomed :)


A risk then tied to a **threat**, its **probability** and its **impacts**.
## How to setup your own DSOMM
The DSOMM application can be run as a Docker image, an Amazon EC2 instance, or as a standalone Angular application using NodeJS. Please see [INSTALL.md](https://github.com/devsecopsmaturitymodel/DevSecOps-MaturityModel/blob/master/INSTALL.md) for further instructions.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

there is no INSTALL.md in DSOMM / your PR

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Coming... But I thought I should get comments on the initiative first. (thanks for noticing. sorry that I forgot to specify that this was missing)

My plan was to gather the installations instructions from the other files, such as the README.

I do have a question about where the README.md and INSTALL.md should be. Today there is a README.md in the root folder, and a copy under assets. It makes sense to keep both in the root folder. But to render them, we also need them under assets, right?

Do you know if it is possible to create a github action that copies the readme (and possibly install.md) from root to assets on every push? (I have no experience creating github actions, though : )

Copy link
Collaborator

@wurstbrot wurstbrot Jan 30, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

But to render them, we also need them under assets, right?

Yes
We could remove it and optimize the build to perform the copy from / to assets.

teamsImplemented:
Default: false
C: true
evidence:
Copy link
Collaborator

@wurstbrot wurstbrot Jan 29, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it is teamsEvidence not evidence

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good thing we're doing a review, then. I just copied this from the existing README. 😁

Talking about README, I will trim that file accordingly when we agree on what goes in the Usage file.

Hope you don't mind, but I feel this PR is more a request-for-comments than a request-for-merge. If you have a better way of collaborating on this, just let me know. My idea was to get some feedback if I was on the right track. Then continue step by step, INSTALL and then README coming up next. Looks like there is some redundancy in the About us as well that we should revise.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated the two READMEs. Better?

@wurstbrot wurstbrot requested a review from 0x41head January 29, 2025 17:49
@wurstbrot
Copy link
Collaborator

wurstbrot commented Jan 29, 2025

Thank you, great work.

Before we add more code, please make sure that tests are not failing /see #355 (comment) /

@vbakke
Copy link
Collaborator Author

vbakke commented Jan 29, 2025

Thank you, great work.

Before we add more code, please make sure that tests are not failing /see #355 (comment) /

Sure. 0x41head's comment in #355 didn't tell me anything new, unfortunately. So I'm still on the same spot. Any hints for understanding Angular test regime for components would be greatly appreciated. :)

README.md Outdated Show resolved Hide resolved
3. Browse to <http://localhost:8080> (on macOS and Windows browse to <http://192.168.99.100:8080> if you are using docker-machine instead
of the native docker installation)

In case you would like to have perform an assessment for multiple teams, iterate from port 8080 to 8XXX, depending of the size of your team.
In case the application should be visible, but the "Implementation Level" shouldn't be changeable, consider the following code:
For customized DSOMM, take a look at https://github.com/wurstbrot/DevSecOps-MaturityModel-custom. In case you would like to have perform an assessment for multiple teams, iterate from port 8080 to 8XXX, depending of the size of your team.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In case you would like to have perform an assessment for multiple teams, iterate from port 8080 to 8XXX, depending of the size of your team.

We do not needs that any more as we have teamsImplemented.

service docker start
docker run -d -p 80:80 wurstbrot/dsomm:latest
docker run -d -p 80:8080 wurstbrot/dsomm:latest
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

maybe 8080:8080

@wurstbrot
Copy link
Collaborator

@0x41head please review tests

@vbakke
Copy link
Collaborator Author

vbakke commented Feb 2, 2025

Thank you for approving the PR, @wurstbrot. I have not finished the INSTALL.md, yet, though. Do you want me to add that, and README adjustments to this PR, or create a new?

Copy link
Collaborator

@0x41head 0x41head left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tests seem to be working perfectly! Thanks!

@wurstbrot wurstbrot merged commit a6c3c26 into devsecopsmaturitymodel:master Feb 8, 2025
2 checks passed
@wurstbrot
Copy link
Collaborator

Thank you for approving the PR, @wurstbrot. I have not finished the INSTALL.md, yet, though. Do you want me to add that, and README adjustments to this PR, or create a new?

create new

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants