Migrate Static Sites to GSA-TTS & add build checks about data.gov HOT 10 CLOSED

Blocked pending attendance of Pages Office Hours to clarify some of the security implementation details...

from data.gov.

Office hours scheduled for 11/2 at 11:30AM EST

EDIT: We will complete a single site with Pages team and then repeat the process for the rest of the sites.

from data.gov.

resources.data.gov:

https://docs.google.com/document/d/16uJVDXZYNPpjC5q5Cxmx-k003mj0SGFRU33I2uKFrQ4/edit#heading=h.m7d74e15hego

from data.gov.

• Go to the /settings/access/ page and confirm the admin and resource group settings.
• Implement a security policy by including a security.md file.
• Activate vulnerability reporting.
• Establish a dependabot.yml file within the .github directory and configure the package ecosystem value.
• Enable CodeQL analysis for code scanning (set to default settings).
• Enable secret scanning.

from data.gov.

setup package-ecosystem value npm in dependabot.yml file GSA/resources.data.gov#626
The property '#/updates/0/package-ecosystem' value "" did not match one of the following values: npm, bundler, composer, maven, mix, cargo, gradle, nuget, gomod, docker, elm, gitsubmodule, github-actions, pip, terraform, pub, swift

from data.gov.

data-strategy:
https://docs.google.com/document/d/12PRQTkHCEp04S6KoWT_UNBb6tWeRQTAegtQPIwNfcHM

datagov-11ty:
https://docs.google.com/document/d/1srG6dMEpZBMVtMLNpgWC8hIXSBLcmHaEfsjZQfohxF0

us-data-federation:
https://docs.google.com/document/d/1lu4Axr44gyB1KldlyO3J7gHpt4cMHpVWmPmsE4o16tI

sdg-indicators-usa:
https://docs.google.com/document/d/1GR2RKVd4tE1LXZEBvbDfsRhrcu2CjuuTruq962-tPvs/edit

from data.gov.

@Jin-Sun-tts let's circle back together to add sdg.data.gov to this list.

from data.gov.

Finished all security setup/modification in https://github.com/GSA/sdg-indicators-usa except the dependabot update.

Could not setup dependabot.yml file because of unsolved PR GSA/sdg-indicators-usa#1054, will check with @btylerburton on Monday.

from data.gov.

configuration and documentation for sdg.data.gov is done.

from data.gov.

checked with Ryan Wold, the feedback.usa.gov is no longer a site, and @btylerburton will work with Ryan to remove it from our https://pages.cloud.gov/sites account.

from data.gov.