microsoft/AzureDevOps-WSJF-Extension

Security

Closed this issue · 1 comments

Curious if there is any validation on commits to this project such as malware checks?

Hi ,
Thank you for your question. Yes, we have several validation measures in place for commits to this project, including checks for malware. These measures include:

Code Reviews: All commits are reviewed by experienced developers to ensure code quality and security. This peer review process helps in identifying and mitigating any suspicious changes.

Continuous Integration (CI): Our CI pipeline includes security checks that run every time code is committed. These checks help in early detection of any vulnerabilities or malware.

Dependency Management: We regularly update and scan our dependencies to prevent any known vulnerabilities from being introduced through third-party libraries.

By implementing these practices, we aim to maintain a secure and reliable codebase. If you have any further questions or suggestions, please feel free to let us know.