devops-maturity-action/devops-maturity.yml at main · devops-maturity/devops-maturity-action · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
# DevOps Maturity Assessment
# https://devops-maturity.github.io/
# https://github.com/devops-maturity/devops-maturity
# Use `dm config --file devops-maturity.yml` to generate badge

# Project Information
project_name: my-project

# Basics
D101: false   # Branch Builds (must have)
D102: false   # Pull Request Builds (must have)
D103: false   # Clean Build Environments (nice to have)

# Quality
D201: false   # Unit Testing (must have)
D202: false   # Functional Testing (must have)
D203: false   # Performance Testing (nice to have)
D204: false   # Code Coverage (nice to have)
D205: false   # Accessibility Testing (nice to have)

# Security
D301: false   # Vulnerability Scanning (must have)
D302: false   # License Scanning (nice to have)

# Supply Chain Security
D401: false   # Documented Build Process (must have)
D402: false   # CI/CD as Code (must have)
D403: false   # Artifact Signing (nice to have)
D404: false   # Dependency Pinning (nice to have)
D405: false   # SBOM Generation (nice to have)

# Analytics
D501: false   # Static Code Analysis (nice to have)
D502: false   # Dynamic Code Analysis (nice to have)
D503: false   # Code Linting (nice to have)

# Reporting
D601: false   # Notifications & Alerts (must have)
D602: false   # Attached Reports (nice to have)
D603: false   # Compliance Mapping & Auditability (nice to have)