toluwalemi / devops-capstone-project Goto Github PK

As a service provider
I need my service to use security headers and CORS policies
So that my web site is not vulnerable to CORS attacks
#### Assumptions
* Flask-Talisman will be used for security headers
* Flask-Cors will be used to establish cross-origin resource sharing (CORS) policies
#### Acceptance Criteria
gherkin Given the site is secured When a REST API request is made Then secure headers and a CORS policy should be returned

As a Developer
I need automation to build and test every pull request
So that I do not have to rely on manual testing of each request, which is time-consuming
#### Assumptions
* GitHub Actions will be used for the automation workflow
* The workflow must include code linting and testing
* The Docker image should be postgres:alpine for the database
* A GitHub Actions badge should be added to the README.md to reflect the build status
#### Acceptance Criteria
gherkin Given code is ready to be merged When a pull request is created Then GitHub Actions should run linting and unit tests And the badge should show that the build is passing