You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+6-10Lines changed: 6 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -10,7 +10,7 @@ Attackers are intelligent and creative, equipped with new technologies and purpo
10
10
11
11
# Usage
12
12
13
-
Go to https://dsomm.timo-pagel.de or clone [this repository](https://github.com/wurstbrot/DevSecOps-MaturityModel/) and run `startDocker.bash`.
13
+
Go to https://dsomm.timo-pagel.de.
14
14
15
15
*_matrix_ shows the dimensions, subdimensions and activities are described.
16
16
*_Implementation Levels_ can be used to measure the current implementation level by clicking on the specific activities which have been performed.
@@ -24,6 +24,8 @@ In this [video](https://www.youtube.com/watch?v=tX9RHZ_O5NU) Timo Pagel describe
24
24
In case you have evidence or review questions to gather evidence, you can add the attribute "evidence" to an activity which will be attached to an activity to provide it to your CISO or your customer's CISO.
25
25
You can switch on to show open TODO's for evidence by changing IS_SHOW_EVIDENCE_TODO to true 'bib.php' `define(IS_SHOW_EVIDENCE_TODO, true);`
26
26
27
+
This page uses the Browser's localStorage to store the state of the circular headmap.
28
+
27
29
# Community
28
30
29
31
Code Freeze: Currently, with the Google Summer student Aryan Prasad we develop a new Angular frontend version, therefore, we do not accept any code changes right now.
@@ -57,12 +59,14 @@ In case you would like to perform a DevSecOps assessment, the following tools ar
57
59
## Container
58
60
59
61
1. Install [Docker](https://www.docker.com)
60
-
2. Run `docker run --rm -p 8080:8080 wurstbrot/dsomm:latest`
62
+
2. Run `docker pull wurstbrot/dsomm:latest && docker run --rm -p 8080:8080 wurstbrot/dsomm:latest`
61
63
3. Browse to <http://localhost:8080> (on macOS and Windows browse to <http://192.168.99.100:8080> if you are using docker-machine instead
62
64
of the native docker installation)
63
65
64
66
For customized DSOMM, take a look at https://github.com/wurstbrot/DevSecOps-MaturityModel-custom. In case you would like to have perform an assessment for multiple teams, iterate from port 8080 to 8XXX, depending of the size of your team.
65
67
68
+
You can download your current state from the circular headmap and mount it again via `docker run -p 8080:8080 -v /tmp/generated.yaml:/app/assets/YAML/generated/generated.yaml wurstbrot/dsomm:latest`.
69
+
66
70
This approach also allows teams to perform self assessment with changes tracked in a repository.
67
71
68
72
@@ -84,14 +88,6 @@ service docker start
84
88
docker run -d -p 80:8080 wurstbrot/dsomm:latest
85
89
```
86
90
87
-
## Tests
88
-
89
-
To run basic tests just
90
-
91
-
```bash
92
-
docker-compose -f docker-compose.dev.yaml up test-php
93
-
```
94
-
95
91
# Credits
96
92
97
93
* The dimension _Test and Verification_ is based on Christian Schneiders [Security DevOps Maturity Model (SDOMM)](https://www.christian-schneider.net/SecurityDevOpsMaturityModel.html). _Application tests_ and _Infrastructure tests_ are added by Timo Pagel. Also, the sub-dimension _Static depth_ has been evaluated by security experts at [OWASP Stammtisch Hamburg](https://www.owasp.org/index.php/OWASP_German_Chapter_Stammtisch_Initiative/Hamburg).
0 commit comments