todo.txt

1. Create AWS user for the project
2. Create Openshift for IaC
4. Docker Content Trust
5. Docker BuiltKit for secrets
6. Trivy
7. Use build cache
8. output of linting and unit tests as xml
15. check security tab
16. resolve comments
17. git hooks for formatting code?
18. run black
19. create .vscode for extensions
20. create a sonarqube server? use terraform?
21. Create a GitHub Actions workflow for CD.??
23. https://kind.sigs.k8s.io/docs/user/ingress/
24. create dockercompose so that i don't have to use the root user?
code coverage
Ensure that documentation is provided on how to test the application.
code integration tests
Use SonarQube Quality Gate check action, also consider Semgrep
Setup OpenSSF Scorecard GitHub Action and fix any issues reported by it.
Best practices when adopting continuous integration
keep appy.py clean
By default, the application will store the data every 5 minutes don't use cron
implement code 5.2 metrics and other things after that
use digests wherever applicable
don't push directly to main