-
Notifications
You must be signed in to change notification settings - Fork 458
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
docs: add '+' to the audit bonus questions
- Loading branch information
Showing
3 changed files
with
26 additions
and
28 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,57 +1,55 @@ | ||
## CI/CD with Jenkins Audit | ||
#### Functional | ||
|
||
### Functional | ||
|
||
#### Download the project and trigger a Jenkins build. Observe if the pipeline runs as expected. | ||
##### Download the project and trigger a Jenkins build. Observe if the pipeline runs as expected. | ||
|
||
###### Does the pipeline initiate and run successfully from start to finish? | ||
|
||
#### Trigger some intentional build errors and observe Jenkins' response. | ||
##### Trigger some intentional build errors and observe Jenkins' response. | ||
|
||
###### Does Jenkins respond appropriately to build errors? | ||
|
||
#### Examine the automated testing step. | ||
##### Examine the automated testing step. | ||
|
||
###### Are tests run automatically during the pipeline execution? Does the pipeline halt on test failure? | ||
|
||
#### Make a minor change in the source code, commit, and push. Observe if the pipeline is triggered automatically. | ||
##### Make a minor change in the source code, commit, and push. Observe if the pipeline is triggered automatically. | ||
|
||
###### Does a new commit and push automatically trigger the Jenkins pipeline? | ||
|
||
#### Check the deployment process. | ||
##### Check the deployment process. | ||
|
||
###### Is the application deployed automatically after a successful build? Is there a rollback strategy in place? | ||
|
||
### Security | ||
#### Security | ||
|
||
#### Examine the permissions on the Jenkins dashboard. | ||
##### Examine the permissions on the Jenkins dashboard. | ||
|
||
###### Are permissions set appropriately to prevent unauthorized access or changes? | ||
|
||
#### Review how sensitive data (like API keys, passwords) is managed in Jenkins. | ||
##### Review how sensitive data (like API keys, passwords) is managed in Jenkins. | ||
|
||
###### Is sensitive data secured using Jenkins secrets or environment variables? | ||
|
||
### Code Quality and Standards | ||
#### Code Quality and Standards | ||
|
||
#### Examine the Jenkinsfile or the build configuration. | ||
##### Examine the Jenkinsfile or the build configuration. | ||
|
||
###### Is the code/script well-organized and understandable? Are there any best practices being ignored? | ||
|
||
#### Look into the test report formats and outputs. | ||
##### Look into the test report formats and outputs. | ||
|
||
###### Are test reports clear, comprehensive, and stored for future reference? | ||
|
||
#### Check for notifications setup. | ||
##### Check for notifications setup. | ||
|
||
###### Are notifications triggered on build and deployment events? Are they informative? | ||
|
||
### Bonus | ||
#### Bonus | ||
|
||
#### Examine if parameterized builds are implemented. | ||
##### Examine if parameterized builds are implemented. | ||
|
||
###### Are there options for customizing the build run with different parameters? | ||
###### +Are there options for customizing the build run with different parameters? | ||
|
||
#### Examine the distributed builds (if implemented). | ||
##### Examine the distributed builds (if implemented). | ||
|
||
###### Are multiple agents utilized effectively for distributed builds? | ||
###### +Are multiple agents utilized effectively for distributed builds? |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters