-
Notifications
You must be signed in to change notification settings - Fork 43
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Prepare docs for OpenSSF Migration (#4649)
* Prepare docs for OpenSSF Migration Signed-off-by: Luke Hinds <[email protected]> * Update README.md Co-authored-by: Edward Thomson <[email protected]> * Update README.md Co-authored-by: Evan Anderson <[email protected]> * Update docs/docs/getting_started/install_cli.md Co-authored-by: Evan Anderson <[email protected]> * Update docs/docs/getting_started/login.md Co-authored-by: Evan Anderson <[email protected]> * Update docs/docs/getting_started/login.md Co-authored-by: Evan Anderson <[email protected]> * Update index.md --------- Signed-off-by: Luke Hinds <[email protected]> Co-authored-by: Edward Thomson <[email protected]> Co-authored-by: Evan Anderson <[email protected]>
- Loading branch information
1 parent
c4ebd6c
commit ba60b09
Showing
13 changed files
with
113 additions
and
50 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -8,7 +8,7 @@ | |
|
||
# What is Minder? | ||
|
||
Minder by [Stacklok](https://stacklok.com/) is an open source platform that helps development teams and open source communities build more | ||
Minder is an open source platform that helps development teams and open source communities build more | ||
secure software, and prove to others that what they’ve built is secure. Minder helps project owners proactively manage | ||
their security posture by providing a set of checks and policies to minimize risk along the software supply chain, | ||
and attest their security practices to downstream consumers. | ||
|
@@ -17,23 +17,20 @@ Minder allows users to enroll repositories and define policy to ensure repositor | |
consistently and securely. Policies can be set to alert only or auto-remediate. Minder provides a predefined set of | ||
rules and can also be configured to apply custom rules. | ||
|
||
Minder can be deployed as a Helm chart and provides a CLI tool `minder`. Stacklok, the company behind Minder, also | ||
provides a free-to-use hosted version of Minder (for public repositories only). Minder is designed to be extensible, | ||
Minder can be deployed as a Helm chart and provides a CLI tool `minder`. Stacklok, a company supporting Minder, also | ||
provides a [free-to-use hosted version of Minder (for public repositories only)](#public-instance). Minder is designed to be extensible, | ||
allowing users to integrate with their existing tooling and processes. | ||
|
||
## Features | ||
|
||
* **Repo configuration and security:** Simplify configuration and management of security settings and policies across repos. | ||
* **Proactive security enforcement:** Continuously enforce best practice security configurations by setting granular policies to alert only or auto-remediate. | ||
* **Artifact attestation:** Continuously verify that packages are signed to ensure they’re tamper-proof, using the open source project Sigstore. | ||
* **Dependency management:** Manage dependency security posture by helping developers make better choices and enforcing controls. Minder is integrated with [Trusty by Stacklok](https://trustypkg.dev) to enable policy-driven dependency management based on the risk level of dependencies. | ||
* **Dependency management:** Manage dependency security posture by helping developers make better choices and enforcing controls. Minder is integrated with [OSV](https://osv.dev/) and [Trusty](https://trustypkg.dev) to enable policy-driven dependency management based on the risk level of dependencies. | ||
|
||
## Minder Cloud | ||
## Public Instance | ||
|
||
Stacklok, the company behind Minder, provides a [free-to-use SaaS version of Minder](https://cloud.stacklok.com/) that includes a UI (for public repositories only). You can access Minder Cloud documentation [here](https://docs.stacklok.com/minder). | ||
|
||
Note that it's not possible to register private repositories. If you'd like to use Minder with private repositories, | ||
feel free to [contact us](mailto:[email protected])! We'd be thrilled to help you out. | ||
Stacklok, a company supporting Minder, provides a free-to-use public instance of Minder. This is the default instance used when you use the `minder` CLI. This instance is available for public repositories only. | ||
|
||
--- | ||
# Getting Started (< 1 minute) | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file not shown.
Binary file not shown.
Oops, something went wrong.