Automation-repetitive-task-software

My project is currently using v2 and can be seen on the URL below that shows the lifecycle of my software development version. URL: https://github.com/KIDI-S-TECH/Automation-repetitive-task-software/tree/v2.3.4

with the help of the bot on stack. it helps me on tracking issues detected on my organization and project. also, I gave some of organization members role to open an issue pull request which will actually trigger or detect an alert on my stack workplace for easy and fast responses. the link below will explain more. https://join.slack.com/share/enQtNjQwNTkxMzU2NDYwOS0zZmViMWFhYmQ2OTAzMjgzYzhkZTBjNTM1MjYzNTQ2N2Y2ZGUwNzUyZjYwNzBlNzYwMGIwMTVlOTc3YTJhNDhl

Actually a vulnerability was detected on my project late last year (December to be precise). However, The CodeQl which is an automated scanning tool that I used for my project on GitHub detected that a bug is spotting some customers from accessing the dashboard on my vercel network. The bug was tackled immediately and it was resolved. It was caused by myself because I left some code that might give threat actors access to users information. For instance, logging out user information. To God may have it, the vulnerability was resolved immediately and users were able to access the project dashboard. Users can report vulnerabilities on my project by opening an issue on GitHub or use the vulnerability reporting file or link on the project to report any vulnerabilities or bugs being detected on the project.

URL: https://github.com/KIDI-S-TECH/Automation-repetitive-task-software?tab=security-ov-file#reporting-a-vulnerability

A report vulnerability template is being attached on my project. For vulnerabilities reporting and response on the project website at GitHub. Which will help users to understand the kind of vulnerabilities the project is currently experiencing and how it was solved after a successful implementation process to mitigate the vulnerability. URL: https://github.com/KIDI-S-TECH/Automation-repetitive-task-software?tab=security-ov-file#security-policy

Yes this aspect was on my project. The CONTRIBUTING.md file on the website provides users with essential information on the primary language the project was developed on and guild on how contributors can contribute to the project.

URL: https://github.com/KIDI-S-TECH/Automation-repetitive-task-software/blob/main/CONTRIBUTING.md

An npm package file was directly installed in the project or repository which enables and helps in detecting which coding styles was used on the project. The npm package is specifically designed for JavaScript codes and applications

This is not applicable on my project because my project does not provide any Native binaries as was mentioned above.

The build and installation system on my project preserve debugging information typical JavaScript libraries. The URL below explains more on how this was met

URL: https://github.com/KidiIT/Automation-repetitive-task-software/actions/runs/8368752324

Not applicable

Not applicable on my project development

This is currently not applicable to the project because it does wasn’t build to be installed rather it can downloaded and used for development of other automation software.

Not applicable

Developers can download everything about the software through the URL in below.

URL : https://zenodo.org/records/10829824

https://github.com/KIDI-S-TECH/Automation-repetitive-task-software/blob/main/.github/dependabot.yml

The dependabot.yml file which has been updated and configured on the project periodically checks for their external dependencies and update them in other to detect known vulnerabilities and fix exploitable.

This was met in a way that my commit are verified on GitHub because I activated the vigilant mode on my project. This gives my project a verified mark with a GPG token in other to make sure my project stand out from other updates reused or maintained by others developers. Also, it is easier to identify vulnerabilities on the reused maintained component.

I used GitHub API which makes it more efficient for me to fetch data from the main branch and then run it through a command line for the data to be stored and reused able by other branches.

This was successfully check and the automated process was very successful for the project. URL: https://github.com/KidiIT/Automation-repetitive-task-software/pull/31

Not applicable.

This isn’t applicable on my project at the moment.

Not applicable on my project at the moment.

This can be seen on the feature.md file on GitHub website of the project. The file helps users to understand and contribute to new features or functionality on the project. URL: https://github.com/KIDI-S-TECH/Automation-repetitive-task-software/blob/main/.github/ISSUE_TEMPLATE/feature_request.md?plain=1

https://github.com/KIDI-S-TECH/Automation-repetitive-task-software

This was met because I clearly explained on my project documentation how a secure design principles was implemented on my project. I made some contributions on LinkedIn how my secure development knowledge was used on my project.

This isn’t applicable on my project because cryptographic algorithms or modes with know serious weaknesses are not available or applicable on the project itself.

Not applicable on the project itself.

This is not applicable to the project because it does not support storing authentication credentials such as passwords and dynamic tokens.

My project supports the secure protocol for all of its network communication. The URL: https://github.com/KIDI-S-TECH/Automation-repetitive-task-software.git

The project is been built under a secured domain name protocol HTTPS which allows users to access the network without having to worry about security. Also it supports all protocols for network communication. URL: https://github.com/KIDI-S-TECH/Automation-repetitive-task-software.git

The action was done on my projects. When I verified my project websites and emails in other to automatically in other to validate such TLS certificates verification by default

This was met on my project but it’s currently not publicly available or visible because I followed the best practices of performing certificate verification which supports TLS protocol for all projects or software that will be built on the project.

This is not applicable because it’s not intended for widespread use.

I made use of the vigilante mode that verifies any release of version control systems of the software. It assigned a GPG key ID to any version control update of the software or fixes publicly noted vulnerabilities on the project.

The project has been tested and approved. The code scanning tool I used on my project helps to scan and validate all input on my project and notify if any was rejected. However, it uses UTF-8 text Strings language for easy identification of data by the software.

MFA has been implemented on the project. Which allows me the owner to verify my identity in two or three ways before I could access some certain information on my project. This reduces security vulnerabilities and software defects

Currently the URL below shows that requirement are met and it’ll be updated once the new URL pops up.

URL: https://zenodo.org/records/10829824

Yes, I used a static analysis tool on my project which periodically check for any vulnerabilities on my project and in an analyzed language or environment. the CodeQL / Analyze (javascript-typescript) (dynamic). the GitHub Advanced security also help in a more productive way. URL: https://github.com/KIDI-S-TECH/Automation-repetitive-task-software/actions/runs/8928352421/job/24523743906

this is not applicable on my project because it's not written using a memory-unsafe language.