Skip to content

Commit 95e4993

Browse files
authored
Update README.md (#606)
Added link to InnerSource Common's guidance page on SCM platform configuration. It focuses on configuration that enables collaboration and is a nice addition to this security focus guidance. This was discussed in #557 and one of the working group video calls. Signed-off-by: Justin Gosses <[email protected]>
1 parent 0e90c9d commit 95e4993

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docs/SCM-BestPractices/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ _by the [Open Source Security Foundation (OpenSSF)](https://openssf.org) [Best P
44

55
## Intro
66

7-
Collaborative source code management platforms (such as GitHub and GitLab) play a critical role in modern software development, providing a central repository for storing, managing, and versioning source code as well as collaborating with a community of developers. However, they also represent a potential security risk if not properly configured. In this guide, we will explore the best practices for securing these platforms, covering topics that include user authentication, access control, permissions, monitoring, and logging.
7+
Collaborative source code management platforms (such as GitHub and GitLab) play a critical role in modern software development, providing a central repository for storing, managing, and versioning source code as well as collaborating with a community of developers. However, they also represent a potential security risk if not properly configured. In this guide, we will explore the best practices for securing these platforms, covering topics that include user authentication, access control, permissions, monitoring, and logging. For additional guidance on selecting configurations that enable cross-organization collaboration, consider the InnerSource Commmon's [guidance section on InnerSource strategy for source code management platform configuration](https://innersourcecommons.gitbook.io/managing-innersource-projects/innersource-tooling).
88

99
## Audience
1010

0 commit comments

Comments
 (0)