-
Notifications
You must be signed in to change notification settings - Fork 11
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Showing
5 changed files
with
190 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,46 @@ | ||
# Contributor Covenant Code of Conduct | ||
|
||
## Our Pledge | ||
|
||
In the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project and our community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation. | ||
|
||
## Our Standards | ||
|
||
Examples of behavior that contributes to creating a positive environment include: | ||
|
||
* Using welcoming and inclusive language | ||
* Being respectful of differing viewpoints and experiences | ||
* Gracefully accepting constructive criticism | ||
* Focusing on what is best for the community | ||
* Showing empathy towards other community members | ||
|
||
Examples of unacceptable behavior by participants include: | ||
|
||
* The use of sexualized language or imagery and unwelcome sexual attention or advances | ||
* Trolling, insulting/derogatory comments, and personal or political attacks | ||
* Public or private harassment | ||
* Publishing others' private information, such as a physical or electronic address, without explicit permission | ||
* Other conduct which could reasonably be considered inappropriate in a professional setting | ||
|
||
## Our Responsibilities | ||
|
||
Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior. | ||
|
||
Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful. | ||
|
||
## Scope | ||
|
||
This Code of Conduct applies both within project spaces and in public spaces when an individual is representing the project or its community. Examples of representing a project or community include using an official project e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. Representation of a project may be further defined and clarified by project maintainers. | ||
|
||
## Enforcement | ||
|
||
Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting the project team at [email protected]. The project team will review and investigate all complaints, and will respond in a way that it deems appropriate to the circumstances. The project team is obligated to maintain confidentiality with regard to the reporter of an incident. Further details of specific enforcement policies may be posted separately. | ||
|
||
Project maintainers who do not follow or enforce the Code of Conduct in good faith may face temporary or permanent repercussions as determined by other members of the project's leadership. | ||
|
||
## Attribution | ||
|
||
This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4, available at [http://contributor-covenant.org/version/1/4][version] | ||
|
||
[homepage]: http://contributor-covenant.org | ||
[version]: http://contributor-covenant.org/version/1/4/ |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,11 @@ | ||
name: compliance | ||
description: | | ||
This document is used to track a projects PIA and STRA | ||
compliance. | ||
spec: | ||
- name: PIA | ||
status: TBD | ||
last-updated: '2020-01-17T23:00:00.000Z' | ||
- name: STRA | ||
status: TBD | ||
last-updated: '2020-01-17T23:00:00.000Z' |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,9 @@ | ||
# How to contribute | ||
|
||
Government employees, public and members of the private sector are encouraged to contribute to the repository by **forking and submitting a pull request**. | ||
|
||
(If you are new to GitHub, you might start with a [basic tutorial](https://help.github.com/articles/set-up-git) and check out a more detailed guide to [pull requests](https://help.github.com/articles/using-pull-requests/).) | ||
|
||
Pull requests will be evaluated by the repository guardians on a schedule and if deemed beneficial will be committed to the master. | ||
|
||
All contributors retain the original copyright to their stuff, but by contributing to this project, you grant a world-wide, royalty-free, perpetual, irrevocable, non-exclusive, transferable license to all users **under the terms of the [license](./LICENSE) under which this project is distributed**. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,72 @@ | ||
# Common Document Generation Service | ||
|
||
[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](LICENSE) [![img](https://img.shields.io/badge/Lifecycle-Stable-97ca00)](https://github.com/bcgov/repomountie/blob/master/doc/lifecycle-badges.md) | ||
|
||
![Tests](https://github.com/bcgov/common-document-generation-service/workflows/Tests/badge.svg) | ||
[![Maintainability](https://api.codeclimate.com/v1/badges/b360d0b4c9ad56149499/maintainability)](https://codeclimate.com/github/bcgov/common-document-generation-service/maintainability) | ||
[![Test Coverage](https://api.codeclimate.com/v1/badges/b360d0b4c9ad56149499/test_coverage)](https://codeclimate.com/github/bcgov/common-document-generation-service/test_coverage) | ||
|
||
[![version](https://img.shields.io/docker/v/bcgovimages/common-document-generation-service.svg?sort=semver)](https://hub.docker.com/r/bcgovimages/common-document-generation-service) | ||
[![pulls](https://img.shields.io/docker/pulls/bcgovimages/common-document-generation-service.svg)](https://hub.docker.com/r/bcgovimages/common-document-generation-service) | ||
[![size](https://img.shields.io/docker/image-size/bcgovimages/common-document-generation-service.svg)](https://hub.docker.com/r/bcgovimages/common-document-generation-service) | ||
|
||
CDOGS - A common hosted service (API) for generating documents from templates, data documents, and assets | ||
|
||
To learn more about the **Common Services** available visit the [Common Services Showcase](https://bcgov.github.io/common-service-showcase/) page. | ||
|
||
## Directory Structure | ||
|
||
```txt | ||
.github/ - PR and Issue templates | ||
app/ - Application Root | ||
├── docker/ - Auxillary support scripts for LibreOffice Python wrapper | ||
├── src/ - Node.js backend web application | ||
├── tests/ - Node.js backend web application tests | ||
└── Dockerfile - Docker image specification | ||
openshift/ - OpenShift-deployment specific files | ||
bcgovpubcode.yml - BCGov public code asset tracking | ||
CODE-OF-CONDUCT.md - Code of Conduct | ||
COMPLIANCE.yaml - BCGov PIA/STRA compliance status | ||
CONTRIBUTING.md - Contributing Guidelines | ||
Dockerfile - Dockerfile Image definition | ||
Jenkinsfile - Top-level Pipeline | ||
Jenkinsfile.cicd - Pull-Request Pipeline | ||
LICENSE - License | ||
SECURITY.md - Security Policy and Reporting | ||
``` | ||
|
||
## Documentation | ||
|
||
* [Application Readme](app/README.md) | ||
* [Openshift Readme](openshift/README.md) | ||
* [Devops Tools Setup](https://github.com/bcgov/nr-showcase-devops-tools) | ||
* [Product Roadmap](https://github.com/bcgov/nr-get-token/wiki/Product-Roadmap) | ||
* [Security Reporting](SECURITY.md) | ||
|
||
## Getting Help or Reporting an Issue | ||
|
||
To report bugs/issues/features requests, please file an issue. | ||
|
||
## How to Contribute | ||
|
||
If you would like to contribute, please see our [contributing](CONTRIBUTING.md) guidelines. | ||
|
||
Please note that this project is released with a [Contributor Code of Conduct](CODE-OF-CONDUCT.md). By participating in this project you agree to abide by its terms. | ||
|
||
## License | ||
|
||
```txt | ||
Copyright 2019 Province of British Columbia | ||
Licensed under the Apache License, Version 2.0 (the "License"); | ||
you may not use this file except in compliance with the License. | ||
You may obtain a copy of the License at | ||
http://www.apache.org/licenses/LICENSE-2.0 | ||
Unless required by applicable law or agreed to in writing, software | ||
distributed under the License is distributed on an "AS IS" BASIS, | ||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
See the License for the specific language governing permissions and | ||
limitations under the License. | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,52 @@ | ||
# Security Policies and Procedures | ||
|
||
This document outlines security procedures and general policies for the Common | ||
Document Generation Service project. | ||
|
||
- [Supported Versions](#supported-versions) | ||
- [Reporting a Bug](#reporting-a-bug) | ||
- [Disclosure Policy](#disclosure-policy) | ||
- [Comments on this Policy](#comments-on-this-policy) | ||
|
||
## Supported Versions | ||
|
||
At this time, only the latest version of Common Document Generation Service is supported. | ||
|
||
| Version | Supported | | ||
| ------- | ------------------ | | ||
| 2.4.x | :white_check_mark: | | ||
| < 2.4.x | :x: | | ||
|
||
## Reporting a Bug | ||
|
||
The `CSS` team and community take all security bugs in `CDOGS` seriously. | ||
Thank you for improving the security of `CDOGS`. We appreciate your efforts and | ||
responsible disclosure and will make every effort to acknowledge your | ||
contributions. | ||
|
||
Report security bugs by sending an email to <[email protected]>. | ||
|
||
The `CSS` team will acknowledge your email within 48 hours, and will send a | ||
more detailed response within 48 hours indicating the next steps in handling | ||
your report. After the initial reply to your report, the security team will | ||
endeavor to keep you informed of the progress towards a fix and full | ||
announcement, and may ask for additional information or guidance. | ||
|
||
Report security bugs in third-party modules to the person or team maintaining | ||
the module. | ||
|
||
## Disclosure Policy | ||
|
||
When the security team receives a security bug report, they will assign it to a | ||
primary handler. This person will coordinate the fix and release process, | ||
involving the following steps: | ||
|
||
- Confirm the problem and determine the affected versions. | ||
- Audit code to find any potential similar problems. | ||
- Prepare fixes for all releases still under maintenance. These fixes will be | ||
released as fast as possible. | ||
|
||
## Comments on this Policy | ||
|
||
If you have suggestions on how this process could be improved please submit a | ||
pull request. |