Checklist: Getting started with secure releases
Use this checklist to set up secure releases functionality for GitHub releases using DigiCert® Software Trust Manager.
By completing these steps, you will connect your GitHub repositories, enable scanning, and begin reviewing vulnerabilities and signing issues identified in your released software.
Before you begin
You must have access to a GitHub repository you want to scan
You must have permission to integrate GitHub with Software Trust Manager.
Checklist
Complete each step in order to set up secure releases in Software Trust Manager.
Sl. No. | Task | See |
|---|---|---|
1 | Understand what secure releases functionality does and how it helps secure released software | |
2 | Connect your GitHub repositories by authorizing GitHub access and completing the onboarding workflow | |
3 | Enable CodeQL and SBOM to expand scanning coverage for connected repositories | |
4 | Review the repository dashboard to understand overall scanning status | |
5 | Review individual repository status and scanning configuration | |
6 | Assess repository risk and coverage | |
7 | Review security alerts for vulnerabilities and signing issues | |
8 | Decide next steps for remediation | |
9 | Generate, view, and download reports |