Discuss implementation of various github integrations

[coreydaley]

• Setup shipwright-io/.github repository:
  • Yes - Completed
  • No
• Setup snyk app
  • Yes
  • No - Will review at some point in future
• Setup CodeQL scanning
  • Yes - Completed via Enable CodeQL scanning on all repositories #153
  • No
• Setup regov.io app - Pending review
  • Yes
  • No
  • Maybe
• Setup Codecov app - Pending review - Investigate usage of CodeCov integration #162
  • Yes
  • No
  • Maybe
• Setup GitHub project
  • Yes - Completed
  • No
  • Setup workflow to add new issues & pull requests to project automatically
    • Yes - Completed via Setup workflow to add new issues & pull requests to project automatically  #150
    • No
  • Add existing issues and pull requests to project
    • Yes - Created Add existing issues and pull requests to project #152
    • No
• Setup workflows/verify.yaml to run: golangci-lint, gosec, govulncheck
  • Yes
  • No
• Setup workflow to apply size label to pull requests
  • Yes - Completed via Enable Pull Request Size GiHub App #151
  • No

[qu1queee]

Some notes from the Refinement meeting today.

• To open an issue for Codecov in Shipwright/Build, in order to understand if is a good fit, based on the types of testing we have(unit/integration/e2e)
• On regov.io, @qu1queee to take a look on it(mainly to understand it)
• On CodeQL, @SaschaSchwarze0 to give it a try in Shipwright/Build.

[coreydaley]

Updates:

• CodeQL has been enabled on all code-bearing repositories by @SaschaSchwarze0 !
• @qu1queee Any updates on setting up Regov.io? I can give you a tour of our implementation for the gorilla organization if you would like.
• Opened Investigate usage of CodeCov integration #162 for CodeCov