From 6fce71fc00a82ea6e2c85eccc3dee144f0c7e8bb Mon Sep 17 00:00:00 2001 From: Lou DeGenaro Date: Mon, 11 Nov 2024 07:53:11 -0500 Subject: [PATCH 1/4] fix: display openssf best practices badge Signed-off-by: Lou DeGenaro --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index e9b28a9e6..2a7ffb0de 100644 --- a/README.md +++ b/README.md @@ -129,6 +129,8 @@ Consult [contributors](https://github.com/oscal-compass/compliance-trestle/graph ______________________________________________________________________ + + We are a Cloud Native Computing Foundation sandbox project. From 4d04ed468f650bb8b5eadb27e95c67a5d6543171 Mon Sep 17 00:00:00 2001 From: Lou DeGenaro Date: Wed, 13 Nov 2024 14:04:37 -0500 Subject: [PATCH 2/4] Move badge location as suggested in PR review Signed-off-by: Lou DeGenaro --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 2a7ffb0de..192422c4f 100644 --- a/README.md +++ b/README.md @@ -7,6 +7,8 @@ ![[Quality gate](https://sonarcloud.io/dashboard?id=compliance-trestle)](https://sonarcloud.io/api/project_badges/measure?project=compliance-trestle&metric=alert_status) ![[Pypi](https://pypi.org/project/compliance-trestle/)](https://img.shields.io/pypi/dm/compliance-trestle) ![GitHub Actions status](https://github.com/oscal-compass/compliance-trestle/actions/workflows/python-test.yml/badge.svg?branch=develop) +![OpenSSF Best Practices](https://www.bestpractices.dev/projects/9408/badge) + Trestle is an ensemble of tools that enable the creation, validation, and governance of documentation artifacts for compliance needs. It leverages NIST's [OSCAL](https://pages.nist.gov/OSCAL/) as a standard data format for interchange between tools and people, and provides an opinionated approach to OSCAL adoption. @@ -129,7 +131,6 @@ Consult [contributors](https://github.com/oscal-compass/compliance-trestle/graph ______________________________________________________________________ - We are a Cloud Native Computing Foundation sandbox project. From d9f38424c990e44efb6469ee5adc4a6099b6e543 Mon Sep 17 00:00:00 2001 From: Lou DeGenaro Date: Wed, 13 Nov 2024 14:16:28 -0500 Subject: [PATCH 3/4] mdformat Signed-off-by: Lou DeGenaro --- README.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/README.md b/README.md index 192422c4f..731f01d18 100644 --- a/README.md +++ b/README.md @@ -9,7 +9,6 @@ ![GitHub Actions status](https://github.com/oscal-compass/compliance-trestle/actions/workflows/python-test.yml/badge.svg?branch=develop) ![OpenSSF Best Practices](https://www.bestpractices.dev/projects/9408/badge) - Trestle is an ensemble of tools that enable the creation, validation, and governance of documentation artifacts for compliance needs. It leverages NIST's [OSCAL](https://pages.nist.gov/OSCAL/) as a standard data format for interchange between tools and people, and provides an opinionated approach to OSCAL adoption. Trestle is designed to operate as a CICD pipeline running on top of compliance artifacts in `git`, to provide transparency for the state of compliance across multiple stakeholders in an environment friendly to developers. Trestle passes the generated artifacts onto tools that orchestrate the enforcement, measurement, and reporting of compliance. @@ -131,7 +130,6 @@ Consult [contributors](https://github.com/oscal-compass/compliance-trestle/graph ______________________________________________________________________ - We are a Cloud Native Computing Foundation sandbox project. From c927d9e2100c8c6f32151c404e3dd539b67bdb99 Mon Sep 17 00:00:00 2001 From: Lou DeGenaro Date: Mon, 25 Nov 2024 08:35:05 -0500 Subject: [PATCH 4/4] add to docs/index.md Signed-off-by: Lou DeGenaro --- docs/index.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/index.md b/docs/index.md index 62b14bdc2..b76cd62bc 100644 --- a/docs/index.md +++ b/docs/index.md @@ -12,6 +12,7 @@ description: Trestle is an ensemble of tools that enable the creation, validatio ![[Quality gate](https://sonarcloud.io/dashboard?id=compliance-trestle)](https://sonarcloud.io/api/project_badges/measure?project=compliance-trestle&metric=alert_status) ![[Pypi](https://pypi.org/project/compliance-trestle/)](https://img.shields.io/pypi/dm/compliance-trestle) ![GitHub Actions status](https://github.com/oscal-compass/compliance-trestle/actions/workflows/python-test.yml/badge.svg?branch=develop) +![OpenSSF Best Practices](https://www.bestpractices.dev/projects/9408/badge) Trestle is an ensemble of tools that enable the creation, validation, and governance of documentation artifacts for compliance needs. It leverages NIST's [OSCAL](https://pages.nist.gov/OSCAL/documentation/) as a standard data format for interchange between tools and people, and provides an opinionated approach to OSCAL adoption.