This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Project Information:template SKAVENGER Final Review Self Evaluation B"

From OWASP
Jump to: navigation, search
Line 7: Line 7:
 
  | style="width:10%; background:#C2C2C2" align="center"| '''Example'''  
 
  | style="width:10%; background:#C2C2C2" align="center"| '''Example'''  
 
  |-
 
  |-
  | style="width:10%; background:#f2984c" align="center"|'''[[:Category:OWASP Project|Release Quality OWASP Tools]]'''
+
  | style="width:10%; background:#f2984c" align="center"|'''[[:Category:OWASP Project#Release_Quality_Projects|Release Quality OWASP Tools]]'''
 
  | style="width:60%; background:#e6e6e6" align="left"|
 
  | style="width:60%; background:#e6e6e6" align="left"|
 
All Beta Quality Requirements plus:
 
All Beta Quality Requirements plus:
Line 28: Line 28:
 
  | style="width:10%; background:#e6e6e6" align="center"|[[OWASP WebGoat Project|OWASP WebGoat Project]]
 
  | style="width:10%; background:#e6e6e6" align="center"|[[OWASP WebGoat Project|OWASP WebGoat Project]]
 
  |-
 
  |-
  | style="width:10%; background:#ffcc66"" align="center"|'''Beta Quality OWASP Tools'''  
+
  | style="width:10%; background:#ffcc66" align="center"|'''Beta Quality OWASP Tools'''  
 
  | style="width:60%; background:#e6e6e6" align="center"|
 
  | style="width:60%; background:#e6e6e6" align="center"|
 
  | style="width:20%; background:#e6e6e6" align="center"|(E)
 
  | style="width:20%; background:#e6e6e6" align="center"|(E)

Revision as of 15:31, 29 April 2008

Class Criteria Review Process Example
Release Quality OWASP Tools

All Beta Quality Requirements plus:

  • Be reasonably easy to use
  • Include online documention built into tool (based on required user documentation)
  • Include build scripts that facilitate building the application from source (Goal: One-click build)
  • Publicly accessible bug tracking system established, ideally at the same place as the source code repository (e.g., at Google code, or Sourceforge)
  • Be run through Fortify Software's open source review (if appropriate) and FindBugs.
    • WebGoat would not be appropriate for example since it would light up like a Christmas tree :-)
  • C/C++ apps (if we have any) should consider being run through Coverity's open source review. Coverity also accepts submissions for open source Java applications.
  • When approved to be Release Quality: Update the link to it on: the OWASP Project page and update its project quality tag on its project page to be Release Quality.

Recommendations:

  • Conference style Powerpoint presentation that describes the use and status of the tool. (This could be used by others to discuss the tool at OWASP Chapter meetings, serve as easy to review offline documentation, etc.)
  • UAT pass on functionality of the tool
  • Developer documents any limitations
  • Requirement: 2 Reviewers + 1 OWASP Board Member.
    • If possible, the project's lead should suggest two Project Reviewers. One of them should be an OWASP Project Leader.
    • If the project's lead can't find the Project Reviewers, the OWASP Board will identify them. The same will happen whenever the reviewers suggested do not have the required approval.
OWASP WebGoat Project
Beta Quality OWASP Tools (E) (F)
Alpha Quality OWASP Tools (D) (E) (F)