GSA Open Source Policy Guidance

This repository is part of the General Services Administration organization in GitHub and is being used to provide supplemental guidance for implementing GSA's Open Source Policy.

Repository contents

This repository can be forked by GSA teams wishing to begin an open source project and should include some or all of the following files.

• Policy - provides further details of the official GSA Open Source Policy
• Practice - the Open Source Policy in practice - describes the approach GSA staff members should take to contribute and maintain code in the open
• Open Source Checklist - provides a checklist that teams can use when open sourcing their code
• checkmarx_poc - provides overview of our efforts for static code scan with Checkmarx static_code_scan - specific instructions on code scanning
• README.md - initial repository file welcoming contributors and describing the repos intent
• LICENSE.md - open source license details for opening and contributing to GSA developed code
• CONTRIBUTING.md - "rules of the road" for contributing to GSA repos including this one
• Code of Conduct - behaviors that should be practiced with working at/with GSA
• Shell scripts - create-gsa-repo.sh and init-gsa-repo.sh used for duplicating this repo
• Include files - .gitignore, codeinventory.yml, and .github - these files are for hosting config and repo environment content

Open Sourcing and Scanning Code

Look at the following .md files in OpenSource_code for details on open sourcing code within a modern dev pipeline with static scans.

1. open_source_checklist
2. static_code_scan
3. checkmarx_poc

Credits

This repository was originally forked from the 18F open source policy repository and the Consumer Financial Protection Bureau. (Note: 18F is a digital delivery service within GSA and practices an open first approach with code publication.)

Public domain

This project is in the worldwide public domain. As stated in CONTRIBUTING:

This project is in the public domain within the United States, and copyright and related rights in the work worldwide are waived through the CC0 1.0 Universal public domain dedication.

All contributions to this project will be released under the CC0 dedication. By submitting a pull request, you are agreeing to comply with this waiver of copyright interest.