Polasee Lhiasaghey Cooid-Voggyl Shickyr
Kiarail as rish
Ta'n polasee shoh cur sheese er kys ta RODMENA LIMITED jannoo lhiasaghey shickyr er software — son ny troggalyn ain hene (goaill stiagh yn jeshaght workflow Highway) as son obbraghyn lesh customeyryn.
Claaghyn
- Reaghey cummaght: ta dy chooilley choad cummal ayns Git lesh shennaghys oddys ve scrutaghey; ta caghlaaghyn jeant trooid committyn oddys ve scrutaghey as currit er ash.
- Secrets: cha nel credentials, keys as tokens rieau currit stiagh ayns repositories; t'ad er nyn storal ayns secret storage cooie as er nyn jyndaa tra ta ourys dy vel ad er nyn goayrts.
- Dependencies: ta shin jannoo beggan jeh crogheyderyn third-party er y ghaa laue, cur shin versionyn er bun, as cur shin caghlaa leah tra ta advisoryn shickyrys er nyn gooishley.
- Briwnys as prowal: ta caghlaaghyn er nyn browal roish y chur magh; ta aghtyn failleil er nyn ghoaill myr stiaghyn kiaddee — ta ny platformyn ain jeant myr shen nagh vod tuinaghyn çhaghnys neu-chompleayrtagh y ghientyn.
- Least privilege by design: products support role-based access control and tenant isolation (for example PostgreSQL row-level security).
- Fys ayns lhiasaghey: cha nel fys persoonagh gientynagh goll er ymmyd ayns çhymmyltaghtyn lhiasaghee ny prowal.
- Release: ta deployments yn-veanagh as yn-chaghlaa; ta caghlaaghyn gientynagh currit er nyn shickyraghey lurg y release.
Làmhail briseadh-sìthe
Ta brishey ayns nyn software — feddynit cheu-sthie ny currit da nyn raad foilshee-ymmydagh — currit fo triage rere craueeaght, kerrit dy tappee, as currit er fys dy foilshee da cooneyderyn bentyn rish.
Cur-ris
She y Stiureyder yn pholicy shoh. T'eh er ny reayrtsey ec y chooid sloo keayrt 'sy vlein as traa dy vel caghlaa mooar çheet er nyn gooid greieyn.