DevSecOps Capability Assessment Cards

Temporarily published to https://jujhars13.github.io/devsecops-assessment-cards/

Cards used to assess the DevSecOps capability of a team.

Inspired by the physical software delivery cards from Matthew Skelton

Use these cards to assess the DevSecOps capability of a team which you can then plot on the DevSecOps capability model.

Local Dev

# OPTIONAL use the awesome `reload` which auto-refreshes your browser on change using websockets
# `npm install -g webpack webpack-cli reload`

# install deps
npm install

# in the root of the repo
node_modules/.bin/webpack --watch
(cd docs && reload -e "html|js|css|json|yml")

# browse to http://localhost:8080/

Pushing to prod

Published via Github pages atm, so build to docs using webpack and just push to main to publish.

Temporarily published to https://jujhars13.github.io/devsecops-assessment-cards/

# simply build for prod
NODE_ENV=production node_modules/.bin/webpack build
# now git commit and push to main

The dataset as CSV to JSON

We find working with CSVs the most straightforward, using Excel or Libre Office Calc. You can then produce the other formats we need (jsonl -> json) using Python csvkit and then jq to split out a mapped json array that's easier to digest by our client-side js:

# use Python csvjson from csvkit to convert our csv file to a jsonl then to a json file
# pip3 install csvkit
csvjson data.csv | jq -c '.[]' > /tmp/data.jsonl
jq -s '.' /tmp/data.jsonl > src/js/cards.json

# badass ninja compile on change using inotifywait
inotifywait -me modify data.csv $(csvjson data.csv | jq -c '.[]' | jq -s '.' > src/js/cards.json)

Licence

Fill your boots

MIT