Proposal for new topic: software security

[bernhold]

We now have several articles related to software security. Maybe we should add a topic for it?

I would suggest Better Reliability --> Software Security.

Targets for this topic include (but are not limited to):

• https://bssw.io/blog_posts/openssf-best-practices-badge-program
• https://bssw.io/blog_posts/secure-software-programming-practices-and-development
• https://bssw.io/blog_posts/trusted-cyberinfrastructure-evaluation-guidance-and-programs-for-assurance-of-scientific-software
• and a new blog post from Akond Rahman on "Security Misconfigurations in Kubernetes Configuration Files"

[bernhold]

We're in the process of publishing another security article, so I really wanted to bump this.

I intend to implement this when I get a chance, unless anyone raises objections before then.

[markcmiller86]

If we do not expect to get into topics relating to behavior of individuals w.r.t to security, I think the topic name, Software Security and the parent Better Reliability is perfect. It just occurred to me that there might be the off chance we'd have content related to behavior too...which might have a different name and fall under a different parent (Skills or Collaboration).

[bernhold]

I don't think we're going to be spending a lot of time on personal behavior/social engineering. But on the rare occasions it does appear, I think we can put it with other software security stuff under reliability.

[rinkug]

David: you should add this if you think it makes sense. I am ok with it