File tree Expand file tree Collapse file tree
src/assets/YAML/default/BuildAndDeployment Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -204,31 +204,31 @@ Build and Deployment:
204204 isImplemented : false
205205 evidence : " "
206206 comments : " "
207- Automated merge of automated PRs :
208- uuid : f2594f8f-1cd6-45f9-af29-eaf3315698eb
209- description : |-
210- Automated merges of automated created PRs for outdated dependencies.
211- risk :
212- Vulnerabilities in running containers stay for too long and might get
213- exploited.
214- measure : |
215- A good practice is to merge trusted dependencies (e.g. spring boot) after a grace period like one week.
216- Often, patches, fixes and minor updates are automatically merged. Be aware that automated merging requires a high
217- automated test coverage.
218- difficultyOfImplementation :
219- knowledge : 2
220- time : 1
221- resources : 1
222- usefulness : 3
223- level : 2
224- implementation :
225- - $ref : src/assets/YAML/default/implementations.yaml#/implementations/dependabot
226- - $ref : src/assets/YAML/default/implementations.yaml#/implementations/renovate
227- references :
228- samm2 :
229- - O-EM-2-B
230- iso27001-2017 :
231- - 12.6.1
232- iso27001-2022 :
233- - 8.8
234- comments : " "
207+ Automated merge of automated PRs :
208+ uuid : f2594f8f-1cd6-45f9-af29-eaf3315698eb
209+ description : |-
210+ Automated merges of automated created PRs for outdated dependencies.
211+ risk :
212+ Vulnerabilities in running containers stay for too long and might get
213+ exploited.
214+ measure : |
215+ A good practice is to merge trusted dependencies (e.g. spring boot) after a grace period like one week.
216+ Often, patches, fixes and minor updates are automatically merged. Be aware that automated merging requires a high
217+ automated test coverage.
218+ difficultyOfImplementation :
219+ knowledge : 2
220+ time : 1
221+ resources : 1
222+ usefulness : 3
223+ level : 2
224+ implementation :
225+ - $ref : src/assets/YAML/default/implementations.yaml#/implementations/dependabot
226+ - $ref : src/assets/YAML/default/implementations.yaml#/implementations/renovate
227+ references :
228+ samm2 :
229+ - O-EM-2-B
230+ iso27001-2017 :
231+ - 12.6.1
232+ iso27001-2022 :
233+ - 8.8
234+ comments : " "
You can’t perform that action at this time.
0 commit comments