Skip to content

Commit b8d58b6

Browse files
committed
Incorporated comments from PR
1 parent 617fb29 commit b8d58b6

File tree

4 files changed

+14
-8
lines changed

4 files changed

+14
-8
lines changed

README.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -63,9 +63,9 @@ In case you would like to perform a DevSecOps assessment, the following tools ar
6363
3. Browse to <http://localhost:8080> (on macOS and Windows browse to <http://192.168.99.100:8080> if you are using docker-machine instead
6464
of the native docker installation)
6565

66-
For customized DSOMM, take a look at https://github.com/wurstbrot/DevSecOps-MaturityModel-custom. In case you would like to have perform an assessment for multiple teams, iterate from port 8080 to 8XXX, depending of the size of your team.
66+
For customized DSOMM, take a look at https://github.com/wurstbrot/DevSecOps-MaturityModel-custom.
6767

68-
You can download your current state from the circular headmap and mount it again via
68+
You can download your current state from the circular heatmap and mount it again via
6969

7070
```bash
7171
wget https://raw.githubusercontent.com/devsecopsmaturitymodel/DevSecOps-MaturityModel-data/main/src/assets/YAML/generated/generated.yaml # or go to /circular-heatmap and download edited yaml (bottom right)
@@ -129,7 +129,9 @@ In the corresponding [dimension YAMLs](https://github.com/devsecopsmaturitymodel
129129
teamsEvidence:
130130
B: All team members completed OWASP Secure Coding Dojo training on 2025-01-11.
131131
C: |
132-
The pentest report from 2025 has been split into Jira tasks.
132+
The pentest report from 2025 has been split into Jira tasks under
133+
[TODO-123](https://jira.example.com/issues/TODO-123).
134+
133135
_2025-04-01:_ All fixes of **critical** findings are deployed to production.
134136
```
135137
The `|` is yaml syntax to indicate that the evidence spans multiple lines. Markdown

src/assets/Markdown Files/README.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -63,9 +63,9 @@ In case you would like to perform a DevSecOps assessment, the following tools ar
6363
3. Browse to <http://localhost:8080> (on macOS and Windows browse to <http://192.168.99.100:8080> if you are using docker-machine instead
6464
of the native docker installation)
6565

66-
For customized DSOMM, take a look at https://github.com/wurstbrot/DevSecOps-MaturityModel-custom. In case you would like to have perform an assessment for multiple teams, iterate from port 8080 to 8XXX, depending of the size of your team.
66+
For customized DSOMM, take a look at https://github.com/wurstbrot/DevSecOps-MaturityModel-custom.
6767

68-
You can download your current state from the circular headmap and mount it again via
68+
You can download your current state from the circular heatmap and mount it again via
6969

7070
```bash
7171
wget https://raw.githubusercontent.com/devsecopsmaturitymodel/DevSecOps-MaturityModel-data/main/src/assets/YAML/generated/generated.yaml # or go to /circular-heatmap and download edited yaml (bottom right)
@@ -129,7 +129,9 @@ In the corresponding [dimension YAMLs](https://github.com/devsecopsmaturitymodel
129129
teamsEvidence:
130130
B: All team members completed OWASP Secure Coding Dojo training on 2025-01-11.
131131
C: |
132-
The pentest report from 2025 has been split into Jira tasks.
132+
The pentest report from 2025 has been split into Jira tasks under
133+
[TODO-123](https://jira.example.com/issues/TODO-123).
134+
133135
_2025-04-01:_ All fixes of **critical** findings are deployed to production.
134136
```
135137
The `|` is yaml syntax to indicate that the evidence spans multiple lines. Markdown

src/assets/Markdown Files/USAGE.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,8 +10,12 @@ DSOMM is a project of the OWASP Foundation.
1010

1111
**OWASP SAMM** is more focused on the overall maturity of an organization's software assurance and security practices, with a broader scope that includes governance, compliance, risk management, and secure software development.
1212

13+
SAMM is written by security specialists for security specialists, focusing on security processes across the whole organizations.
14+
1315
**DSOMM** focuses on activities that integrate security directly into the DevOps workflows. DSOMM takes a more technical approach, going lower in the technology stack it provides a roadmap on how to systematically improve the security in the software development.
1416

17+
DSOMM is written for technical teams focused on implementing secure software.
18+
1519
DSOMM has currently has a OWASP Lab status, while SAMM has a Flagship status.
1620

1721
# How to use this DSOMM site

src/assets/Markdown Files/dimensions.md

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,8 +10,6 @@ on the [OWASP Project Integration Project Writeup](https://github.com/OWASP/www-
1010

1111
Secure configuration standards can be enforced during the deployment using the [Open Policy Agent](https://www.openpolicyagent.org/).
1212

13-
![SAMM Release](https://github.com/OWASP/www-project-integration-standards/raw/master/writeups/owasp_in_sdlc/images/samm_release.png "SAMM Release")
14-
1513
**Example Low Maturity scenario:**
1614

1715
The team manually deploys software to production without standardized or automated processes. Secrets, such as passwords and API keys, may have been hardcoded or left in configuration files that are committed to version control, leading to potential exposure and security risks.

0 commit comments

Comments
 (0)