Repository navigation
Expand file tree
/
Copy pathoutcomes.json
More file actions
225 lines (225 loc) · 6.74 KB
/
Copy pathoutcomes.json
File metadata and controls
225 lines (225 loc) · 6.74 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
{
"schema_version": 1,
"outcomes": [
{
"id": "github-adoption",
"name": "Standardize software delivery",
"tagline": "Give teams a shared development platform with consistent access and delivery controls.",
"description": "Plan and release a reviewed change in one customer repository. Check existing controls before adding new ones.",
"personas": [
"customer-developer",
"platform-governance",
"solution-architect",
"platform-engineer"
],
"adoption_stage": [
"assess",
"pilot",
"scale",
"operate"
],
"business_value": [
"streamline-platform-adoption",
"standardize-developer-flow",
"improve-governance"
],
"source_platforms": [
"greenfield",
"github"
],
"success_metrics": [
"The customer's GitHub organization has a production repository with teams, permissions, rulesets, required checks, and audit visibility.",
"The team's next production pull request runs required checks and merges through the configured ruleset.",
"Customer developers use GitHub to plan work, write and review code, and automate delivery."
],
"challenge_ids": [
"ghec-ch00",
"ghec-ch01",
"ghec-ch02",
"ghec-ch03",
"ghec-ch04",
"ghec-ch07",
"ghec-ch08",
"ghec-ch37",
"ghec-ch38",
"ghec-ch36",
"ghec-ch39",
"ghec-ch40",
"ghec-ch41",
"ghec-ch42",
"ghec-ch44",
"ghec-ch45",
"ghec-ch46",
"ghec-ch48",
"ghec-ch49",
"ghas-admin-01",
"ghas-admin-05",
"ghec-ch51",
"ghec-ch09",
"ghec-ch10",
"ghec-ch14",
"ghec-ch19",
"ghec-ch20",
"ghec-ch28",
"ghec-ch29",
"ghec-ch27",
"ghec-ch30",
"ghec-ch32",
"ghec-ch31",
"ghec-ch33",
"ghec-ch34",
"ghec-ch05",
"ghec-ch18"
]
},
{
"id": "platform-migration",
"name": "Migrate development platforms",
"tagline": "Move repositories and delivery controls to GitHub, then verify teams can keep working.",
"description": "Choose one source platform. Migrate a pilot, rebuild missing controls and verify the team's first post-cutover pull request.",
"personas": [
"platform-engineer",
"platform-governance",
"solution-architect",
"customer-developer"
],
"adoption_stage": [
"assess",
"pilot",
"scale"
],
"business_value": [
"reduce-migration-risk",
"accelerate-cutover",
"standardize-delivery"
],
"source_platforms": [
"azure-devops",
"bitbucket",
"gitlab",
"other"
],
"success_metrics": [
"A migrated repository in the customer's GitHub organization contains the expected history, default branch, teams, permissions, and rulesets.",
"The first production pull request after migration runs GitHub-native checks, security scans, and review requirements before merge.",
"The customer's platform team verifies each legacy control's GitHub equivalent or documents its cutover decision."
],
"challenge_ids": [
"ghec-ch00",
"ghec-ch21",
"ghec-ch22",
"ghec-ch23",
"ghec-ch24",
"ghec-ch25",
"ghec-ch26",
"ghec-ch04",
"ghec-ch05",
"ghec-ch07",
"ghec-ch08",
"ghec-ch18",
"ghec-ch02",
"ghas-admin-01",
"ghas-admin-02",
"ghas-admin-03",
"ghas-admin-05",
"ghec-ch51",
"ghec-ch39",
"ghec-ch40",
"ghec-ch41",
"ghec-ch29"
]
},
{
"id": "ghas-adoption",
"name": "Strengthen application security",
"tagline": "Apply security checks across repositories and decide who fixes the findings.",
"description": "Configure a security pilot or complete a developer remediation case. Use the same alert and repository through review and rescan.",
"personas": [
"security-lead",
"appsec-engineer",
"customer-developer",
"platform-governance"
],
"adoption_stage": [
"pilot",
"scale",
"operate"
],
"business_value": [
"reduce-security-risk",
"shift-left-security",
"improve-remediation-flow"
],
"source_platforms": [
"github",
"azure-devops",
"bitbucket",
"gitlab"
],
"success_metrics": [
"Approved security configurations apply the intended secret, code, and dependency controls to the customer's repository portfolio.",
"Controlled tests prove that push protection, CodeQL merge protection, and dependency review stop risky changes before merge.",
"Security Overview, service targets, and a bounded campaign show who owns remediation and which repositories enter the next rollout wave."
],
"challenge_ids": [
"ghas-admin-01",
"ghas-admin-02",
"ghas-admin-03",
"ghas-admin-05",
"ghas-admin-06",
"ghas-admin-07",
"ghas-admin-08",
"ghas-00",
"ghas-02",
"ghas-03",
"ghas-04"
]
},
{
"id": "agentic-workflows",
"name": "Automate development tasks with AI",
"tagline": "Use AI agents for routine repository work, with clear permissions and human review.",
"description": "Automate one recurring task in the customer's repository. Use ordinary Actions when fixed rules can handle it.",
"personas": [
"customer-developer",
"platform-engineer",
"solution-architect",
"platform-governance"
],
"adoption_stage": [
"pilot",
"scale",
"operate"
],
"business_value": [
"automate-repetitive-work",
"improve-developer-productivity",
"standardize-agent-safety"
],
"source_platforms": [
"github"
],
"success_metrics": [
"An agent workflow runs from a real issue, pull request, or CI failure in the customer's GitHub organization.",
"Each agent uses documented triggers, least-privilege permissions, allowed tools, logs, and human review points.",
"Agent-generated changes land only through pull requests with required checks and reviewer approval."
],
"challenge_ids": [
"ghaw-00",
"ghaw-19",
"ghaw-06",
"ghaw-07",
"ghaw-17",
"ghaw-18",
"ghaw-21",
"ghec-ch30",
"ghec-ch19",
"ghec-ch29",
"ghec-ch32",
"ghec-ch31",
"ghec-ch33",
"ghec-ch34"
]
}
]
}