Home

Table of contents

• Table of contents
• 1. Cheat-sheets
  • 1.1. Automation cheat-sheets
  • 1.2. UX cheat-sheets
• 2. Configuration
• 3. InnerSource resources
• 4. Metrics and analytics
• 5. Security
  • 5.1. Data leak prevention
    • 5.1.1. Manual removal
    • 5.1.2. Automated removal
  • 5.2. Vulnerability scanners

1. Cheat-sheets

Quick reference guides for stuff you don't want to memorize.

1.1. Automation cheat-sheets

Let automation communicate for you!

Automated issue and pull request generation .

1.2. UX cheat-sheets

Improve developer experience with icons, images, and media.

• ADR status labels
• Badges cheatsheet
• Octicon cheatsheet
  
  • CDN   
  • SVG grid
• Project status badges
• TechRadar labels

2. Configuration

• The Twelve-Factor App: Config

  Store config in the environment

  Wiggins, A. (2018). The Twelve-Factor App . 12factor.net. Retrieved 8 March 2018, from https://12factor.net/config

• motdotla/dotenv

  Loads environment variables from .env for nodejs projects.

3. InnerSource resources

Learning materials and resources to support your software product and grow your community, from handbooks to how-to guides.

Visit Mozilla Science Lab's "'Working Open' Project Guide" page for structured exercises to help you create build docs and tools that support:

• Why Open?
  • Working Open Basics
  • Open at Mozilla
• Project Setup
  • Lowering Barriers
  • Roadmapping
  • Legal
  • Project Checklist
• Working with Contributors
  • Mechanics of Contributing
  • Engaging Contributors
  • Developing Leaders
• Getting Unstuck
  • Where to Get Help
  • Toxic Members
• Maintaining Momentum
  • Events
  • Project Management
• Further Reading
• Edit this Book

4. Metrics and analytics

Measure individual, team, project, and organizational performance.

4.1. Developer ranking

• https://github.com/coderstats/coderstats.net
• noomorph/github-user-rank-extension is a Chrome and Firefox browser extension that supplements GitHub developer profiles with language bars indicating their "rank" relative to other GitHub users.
• blackxored/git-awards ranks your programming language skills by city, country, the world, and GitHub stargazers.

4.2. Programming language identification

github/linguist is used on GitHub.com to detect blob languages, ignore binary or vendored files, suppress generated files in diffs, and generate language breakdown graphs.

5. Security

Resources to help you mitigate attacks and data theft.

5.1. Data leak prevention

Data loss prevention software detects potential data breaches/data ex-filtration transmissions and prevents them by monitoring, detecting and blocking sensitive data while in-use (endpoint actions), in-motion (network traffic), and at-rest (data storage).

Data loss prevention software. (2018). En.wikipedia.org. Retrieved 8 March 2018, from https://en.wikipedia.org/wiki/Data_loss_prevention_software

5.1.1. Manual removal

• "Removing sensitive data from a repository".

  If you commit sensitive data, such as a password or SSH key into a Git repository, you can remove it from the history. To entirely remove unwanted files from a repository's history you can use either the git filter-branch command or the BFG Repo-Cleaner.

• "Removing files from a repository's history."

  Warning: These procedures will permanently remove files from the repository on your computer and

5.1.2. Automated removal

• dxa4481/truffleHog

  Searches through git repositories for high entropy strings and secrets, digging deep into commit history

5.2. Vulnerability scanners

https://snyk.io/docs/