Move CycloneDX Taxonomy to the GitLab docs
Why are we doing this work
In #366365 (closed), we created a CycloneDX property taxonomy and formally registered it with the CycloneDX project.
Since this document defines a contract similar to an API, we want changes to it to require approval from our team in order to prevent inadvertently breaking the contract. We initially chose to create an individual GitLab project to provide this control. However, creating new projects is discouraged unless necessary. We may be able to place this documentation inside the GitLab docs instead, and use a codeowners file in order require that changes be approved by our team.
Relevant links
Non-functional requirements
-
Documentation: -
Feature flag: -
Performance: -
Testing:
Implementation plan
This is a specially controlled document which requires the use of codeowners to enforce extra control.
-
Move https://gitlab.com/gitlab-org/security-products/gitlab-cyclonedx-property-taxonomy
tohttps://docs.gitlab.com/ee/development/sec/
-
Add codeowners so that threat insights are approvers for changes to that page -
Update https://github.com/CycloneDX/cyclonedx-property-taxonomy#registered-top-level-namespaces to point to the new location. -
Add note in the document that this is a controlled document.
Verification steps
Edited by Alana Bellucci