2.0.0 Administrative Security Review

This ticket documents the administrative security review performed against tag 2.0.0 of the nshm-hawaii project.

assigned to @bclayton

changed the description

Tag 2.0 and accompanying commits do not contain any personal, private, or sensitive information.

CODE_OF_CONDUCT.md

Link to scientific code of conduct should not include www sub-domain

I think this is OK. The URL for the CoC seems to be jumping around a bit, but the CMA currently maps back in the www if you leave it out. Same comment for similar www items below.

DISCLAIMER.md

Disclaimer may need updated to include the provisional wording

Updated in !11 (merged)

code.json

• URLS should reference the raw variation as opposed to the blob version
  • Raw example: https://code.usgs.gov/ghsc/nshmp/nshms/nshm-hawaii/-/raw/2.0/LICENSE.md
• URLs should point to resources matching version associated with the release
  • The version associated with the release is defined in the version top-level key
  • It is understandably confusing that this tag may not yet exist, but we can still accurately predict these URLs values
• version not specified
• Remove root doi section
• Should status be development?
• downloadURL wrong URL, change to: https://code.usgs.gov/ghsc/nshmp/nshm-hawaii/-/archive/main/nshm-hawaii.zip
• Add GeoJSON and Markdown to languages array?
• What is the reason for the tag doi|###TBD###? Possibly remove.
• Update metadataLastUpdated to proper date.

Side note: You may want to get an email that can be used for NSHMP development questions, something like nshmp-dev-team@usgs.gov

Updated in !11 (merged). Version will be added to URLs upon completion of code review and change to approved release. We've secured the DOI that will be used.

LICENSE.md

Link to USGS copyrights and credits should not include the www sub-domain

README.md

URLs should not include www sub-domain

I have completed the administrative security review as documented above. I've re-assigned this to @pmpowers for reconciliation.

assigned to @pmpowers and unassigned @bclayton

mentioned in merge request !11 (merged)

mentioned in merge request !12 (closed)

Issues identified in this review have been addressed in !11 (merged). This issue will be closed upon center director approval for provisional release.

mentioned in merge request !13 (merged)

changed milestone to %NSHM Hazard Tool launch

added To Do label

Reassigning to @bclayton for further comment or sign-off.

removed To Do label

added Needs Review label

assigned to @bclayton and unassigned @pmpowers