From 3b5d2a07000d6718e1a6485a7b3c4dd42eb55acb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marek=20=C5=A0ottl?= <40571887+sottlmarek@users.noreply.github.com> Date: Wed, 1 Dec 2021 16:05:27 +0100 Subject: [PATCH] Contribution rules updates --- README.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 5ff3c23..37c1fa0 100644 --- a/README.md +++ b/README.md @@ -4,13 +4,14 @@ If you want to contribute to this Library of knowledge please create proper PR (Pull request) with description what you are adding following these set of rules: * Clear description of PR (What tool, why, stars, maturity and topic) -* Keep it simple +* Keep it simple - Fill the description properly * Fact over feelings or personal opinions * Add source and follow the Library style * Avoid duplicits - one tool, one topic * Try to make bigger updates then on tool link * Currently Open-source only * Add only active projects +* Add only security tools _Note:_ Currently this is early version of the library. I recommend PR after first official release. @@ -110,7 +111,7 @@ Dependecny security testing and analysis is very important part of disocvering s | **bundler-audit** | [https://github.com/rubysec/bundler-audit](https://github.com/rubysec/bundler-audit) | Patch-level verification for bundler |![Bundler audit](https://img.shields.io/github/stars/rubysec/bundler-audit?style=for-the-badge)| | **gemnasium** | [https://gitlab.com/gitlab-org/security-products/analyzers/gemnasium ](https://gitlab.com/gitlab-org/security-products/analyzers/gemnasium ) | Dependency Scanning Analyzer based on Gemnasium || | **Dependabot** | [https://github.com/dependabot/dependabot-core](https://github.com/dependabot/dependabot-core) | Automated dependency updates built into GitHub providign security alerts |![Dependabot](https://img.shields.io/github/stars/dependabot/dependabot-core?style=for-the-badge)| -| **Renovatebot** | [https://github.com/renovatebot/renovate](https://github.com/renovatebot/renovate) | Automated dependency updates, multi-platform and multi-language |![Renovatebot](https://img.shields.io/github/stars/renovatebot/renovate?style=for-the-badge)| +| **Renovatebot** | [https://github.com/renovatebot/renovate](https://github.com/renovatebot/renovate) | Automated dependency updates, patches multi-platform and multi-language |![Renovatebot](https://img.shields.io/github/stars/renovatebot/renovate?style=for-the-badge)| | **npm-check** | [https://www.npmjs.com/package/npm-check](https://www.npmjs.com/package/npm-check) | Check for outdated, incorrect, and unused dependencies. |![npm-check](https://img.shields.io/github/stars/dylang/npm-check?style=for-the-badge)| ## Supply chain specific tools