[ramirezperformance-alt]

Enrol projects/bcl-defectdojo

I have verified each of the following before submitting this project (tick each box by changing [ ] to [x]):

• I am a core maintainer of this project.
• I accept the OSS Scanner terms.
• I confirm that I believe my project meets the inclusion criteria and is an established project that users depend on.
• project.yaml follows the README (one project per PR; tools/validate.py passes locally).
• tools/check <name> builds the project, and its tests run in the shell that follows.
• primary_contact must be the email address of the primary security contact.
• There is a Dockerfile that builds the project (required) in one of two places: in the project's repository at the path dockerfile: names, or
  next to project.yaml in this repo.
• threat_model.md is written for this project (recommended but optional), placed in the same way: in the repository at the path threat_model:
  names, or next to project.yaml in this repo.
  To sign the CLA, post a comment on this pull request that contains only this line: I have read the CLA Document and I hereby sign the CLA
  To change an enrolment, edit project.yaml; to pause reports, set disabled: true; to withdraw the project, remove projects/<name>/.
  Context: Enrollment for the Bancolombia innersource fork bancolombia/django-DefectDojo,
  default branch trunk. Dockerfile and threat model are next to project.yaml in this PR

[github-actions]

All contributors have signed the CLA ✍️ ✅
_{Posted by the CLA Assistant Lite bot.}

[github-actions]

Enrolment triage: projects/bcl-defectdojo

Repository: bancolombia/django-DefectDojo at trunk · opened by ramirezperformance-alt

	Check	Result
⚠️	Repository	a fork of another repository (created 3 years ago, last push today)
ℹ️	Stars / forks	8 stars · 3 forks · 1 watching
⚠️	Outside participants	2 people from outside the project opened 2 of the last 51 issues and pull requests
⚠️	Criticality score	not scored: a fork of DefectDojo/django-DefectDojo, whose history it carries
ℹ️	Package rank	by downloads: nothing from this repository found in the top 15,000 on PyPI or the top 10,000 on npm
✅	License	BSD-3-Clause
❌	Opened by an active maintainer	no maintainer role visible; 0 commits in the last 12 months; not in the top 100 contributors
ℹ️	Contact in SECURITY.md	SECURITY.md gives no email address to check lumramir@bancolombia.com.co against
ℹ️	OSS-Fuzz	not found in OSS-Fuzz
ℹ️	.oss-scanner/ in the repository	not present; the Dockerfile is in this pull request
✅	Pull request scope	only this project's directory
✅	tools/validate.py	passes
⚠️	Checklist	1 of 8 not ticked: 'tools/check <name>' builds the project, and its tests run in the shell that fol…

_{Automated, from public data, to help reviewers. Enrolment is decided case by case against the criteria. If you think we got something wrong, please tell us in a reply.}

[ramirezperformance-alt]

I have read the CLA Document and I hereby sign the CLA