Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion content/library/application-security/checklist.md
Original file line number Diff line number Diff line change
Expand Up @@ -183,7 +183,7 @@ This assessment checklist focuses on evaluating and enhancing the **Application
- **Repository Structure:**
- Assess the organization and structure of repositories for clarity and scalability.
- Determine whether repositories follow a naming convention, and ensure all repositories have a description.
- Check for the use of [custom properties](https://docs.github.com/en/enterprise-cloud@latest/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization) to dynamically manage and enforce.
- Check for the use of [custom properties](https://docs.github.com/enterprise-cloud@latest/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization) to organize repositories and target them with rulesets.
- Verify that repositories are appropriately segmented as to avoid monolithic structures unnecessarily, or determine the necessity of such an architecture.
- Check for the use of branch protection rules to maintain code quality.

Expand Down
26 changes: 13 additions & 13 deletions content/library/application-security/quick-links.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,28 +11,28 @@ A curated list of resources and tools to enhance security across the **Applicati

## Security

- [GitHub Advanced Security](https://docs.github.com/en/github/getting-started-with-github/about-github-advanced-security)
- [Securing your organization](https://docs.github.com/en/enterprise-cloud@latest/code-security/securing-your-organization)
- [Fixing security alerts at scale](https://docs.github.com/en/enterprise-cloud@latest/code-security/securing-your-organization/fixing-security-alerts-at-scale)
- [Microsoft Azure Security Center](https://learn.microsoft.com/en-us/azure/security-center/security-center-introduction)
- [About GitHub Advanced Security](https://docs.github.com/get-started/learning-about-github/about-github-advanced-security)
- [Configuring security features in your organization](https://docs.github.com/enterprise-cloud@latest/code-security/how-tos/secure-at-scale/configure-organization-security)
- [Running a security campaign to fix alerts at scale](https://docs.github.com/enterprise-cloud@latest/code-security/tutorials/secure-your-organization/best-practice-fix-alerts-at-scale)
- [What is Microsoft Defender for Cloud?](https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-cloud-introduction)

## Compliance

- [Accessing compliance reports for your enterprise](https://docs.github.com/en/enterprise-cloud@latest/admin/overview/accessing-compliance-reports-for-your-enterprise)
- [Microsoft Compliance Offerings](https://learn.microsoft.com/en-us/compliance/regulatory/offering-home)
- [GitHub Subprocessors](https://docs.github.com/en/site-policy/privacy-policies/github-subprocessors)
- [Accessing compliance reports for your enterprise](https://docs.github.com/enterprise-cloud@latest/admin/overview/accessing-compliance-reports-for-your-enterprise)
- [Microsoft compliance offerings](https://learn.microsoft.com/en-us/compliance/regulatory/offering-home)
- [GitHub Subprocessors](https://docs.github.com/site-policy/privacy-policies/github-subprocessors)

## Proactivity

- [Keeping your dependencies updated automatically with Dependabot version updates](https://docs.github.com/en/enterprise-cloud@latest/code-security/dependabot/dependabot-version-updates)
- [Configuring Dependabot security updates](https://docs.github.com/en/enterprise-cloud@latest/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates)
- [Configuring Dependency Review to catch vulnerable dependencies in your pull requests](https://docs.github.com/en/enterprise-cloud@latest/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review)
- [Configuring Push Protection to block commits with hard coded secrets](https://docs.github.com/en/enterprise-cloud@latest/code-security/secret-scanning/push-protection-for-repositories-and-organizations)
- [Dependabot version updates](https://docs.github.com/enterprise-cloud@latest/code-security/concepts/supply-chain-security/dependabot-version-updates)
- [Configuring Dependabot security updates](https://docs.github.com/enterprise-cloud@latest/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/configure-security-updates)
- [Dependency review](https://docs.github.com/enterprise-cloud@latest/code-security/concepts/supply-chain-security/dependency-review)
- [Push protection](https://docs.github.com/enterprise-cloud@latest/code-security/concepts/secret-security/push-protection)
- [Azure security best practices and patterns](https://learn.microsoft.com/en-us/azure/security/fundamentals/best-practices-and-patterns)

## Awareness

- [GitHub Security Alerts](https://github.blog/news-insights/product-news/introducing-security-alerts-on-github/)
- [Working with security advisories](https://docs.github.com/en/enterprise-cloud@latest/code-security/security-advisories)
- [How-tos for fixing vulnerabilities](https://docs.github.com/enterprise-cloud@latest/code-security/how-tos/report-and-fix-vulnerabilities/fix-reported-vulnerabilities)
- [Azure Security Blog](https://azure.microsoft.com/en-us/blog/category/security/)
- [Microsoft Learn: Security, Compliance, and Identity Fundamentals](https://learn.microsoft.com/en-us/credentials/certifications/security-compliance-and-identity-fundamentals/?practice-assessment-type=certification)
- [Microsoft Certified: Security, Compliance, and Identity Fundamentals](https://learn.microsoft.com/en-us/credentials/certifications/security-compliance-and-identity-fundamentals/?practice-assessment-type=certification)
Loading
Loading