Difference between revisions of "Project Information:template Source Code Review OWASP Projects - Final Review - Second Reviewer - F"

Project Deliveries & Objectives

OWASP Source Code Review OWASP-Projects Project's Deliveries & Objectives

1. At what extent have the project deliveries & objectives been accomplished? Having in consideration the assumed ones, please exemplify writing down those of them that haven't been realised.

1. Re-Verified that the workflow for introducing static analysis into OWASP projects has been created.
2. Re-Verified that ?? OWASP projects have been submitted to be analyzed on the owasp.fortify.com site to establish an OWASP baseline.
3. Re-Verified that the project has submitted the ?? most popular open source PHP projects to be analyzed on the owasp.fortify.com site to establish an open source baseline.

2. At what extent have the project deliveries & objectives been accomplished? Having in consideration the assumed ones, please quantify in terms of percentage.

1. Workflow for introducing static analysis into OWASP projects (100%).
2. Analyzed ?? OWASP projects (100%).
3. Analyzed ?? most popular open source PHP projects on owasp.fortify.com (100%).

3. Please do use the right hand side column to provide advice and make work suggestions.

A little summary/report of the number of the OWASP vs other projects being baselined would have been nice to have as a reference.

Assessment Criteria

OWASP Project Assessment Criteria

1. Having into consideration the OWASP Project Assessment Methodology which criteria, if any, haven’t been fulfilled in terms of Alpha Quality status?

Basic requirements are satisfied considering that this is not a software release project but rather a project engagement project to use a tool

2. Having into consideration the OWASP Project Assessment Methodology which criteria, if any, haven’t been fulfilled in terms of Beta Quality status?

Probably producing documentation is more a Beta objective? That could be related to produce security issues metrics to compare projects with their baseline

3. Having into consideration the OWASP Project Assessment Methodology which criteria, if any, haven’t been fulfilled in terms of Release Quality status?

I would think a release status for this project would involve a documented process and procecure for baseline source code analysis metrics, analysis and reporting.

4. Please do use the right hand side column to provide advice and make work suggestions.