[DevOps] SOC2 Compliance Requirements

[ChathurindaRanasinghe]

Requirement

• There is a requirement by Michal on mandatory rules and settings that should be configured in GH repos to cater to the SOC2 compliance requirements.
• The document below covers an overview of the suggested and recommended Github Repository Baseline Settings;
• https://h2oai.atlassian.net/wiki/spaces/DEVOPS/pages/3921739777/GitHub+Repository+Baseline+Settings
• Software Development-1.pdf

Issues

• Default branch should be the main branch.
• Snyk scan should be required.
• Following branch rules to be enforced as per the document;
• https://h2oai.atlassian.net/wiki/spaces/DEVOPS/pages/3921739777/GitHub+Repository+Baseline+Settings

Changed

• Have added a CODEOWNERS file & PR Template. Kindly please validate this.
• All other changes will be done after confirmation to proceed with the other requirements.

Parent Issue

• https://github.com/h2oai/h2o-infra/issues/366

[mturoci]

Thanks @ChathurindaRanasinghe!

I also edited branch protection rules as outlined in the doc.