Skip to content

MVP Roadmap #30

Closed
Closed
@UlisesGascon

Description

@UlisesGascon

Goals

Before starting MVP development, we completed a Proof of Concept (POC) (official presentation, video, source code, slides).

The primary goal of the MVP is to deprecate the old POC and redesign its components based on the feedback collected during and after its presentation.

The MVP will also enable several critical capabilities as we transition toward the product development phase:

  • Enable external collaboration: Provide tools, guides, and a clear way to identify tasks for contributors. Avoid requiring high-level access to GitHub APIs or infrastructure access for contributions.
  • Support complex workflows: Allow repository content analysis, enabling operations beyond the HTTP API capabilities of the POC.
  • Smooth dashboard-website integration: Ensure seamless integration with the website.
  • Adopt a relational database: Move away from the local filesystem database in favor of a relational database with features like migrations and seeding for improved ergonomics.

Backlog

Milestone 1: Adopt a relational database and migrate away from the POC

Transition from a local filesystem database to a relational database with robust features like migrations and seeding.

Achieved

Milestone 2: Enable external collaboration

Provide tooling, guides, and accessible workflows to encourage contributor involvement without requiring high-level access.

Achieved

Milestone 3: Improve website integration

Ensure seamless integration between the dashboard and the OpenJS Security Program Standards website.

Achieved

Milestone 4: Enable artifacts generation

Support the creation of artifacts such as reports, analysis results, and alerts, with mechanisms for notifying stakeholders.

Achieved

  • Include all the artifacts generation to an specific folder (/output/*) and avoid commit then by include a .gitignore rule
  • @UlisesGascon Add an script to send the generated artifacts to a private artifact directory (TBC)
  • @UlisesGascon Migrate the legacy POC scripts/templates to the MVP and ensure that we can at least generate the same markdown samples but using the database this time
  • @inigomarquinez/@UlisesGascon brainstorm and generated web rich resources that can be embedded into the website (public dashboard information) as a POC

Milestone 5: Ensure compatibility with diverse checks

Support various types of checks, including manual tasks, automated workflows, and complex executors like long-running analyses.

Achieved

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions