[DevOps] SOC2 Compliance Requirements

[ChathurindaRanasinghe]

Requirement

• There is a requirement by Michal on mandatory rules and settings that should be configured in GH repos to cater to the SOC2 compliance requirements.
• The document below covers an overview of the suggested and recommended Github Repository Baseline Settings;
• https://h2oai.atlassian.net/wiki/spaces/DEVOPS/pages/3921739777/GitHub+Repository+Baseline+Settings
• Software Development-1.pdf

Issues

• Default branch should be the main branch.
• Snyk scan should be required.
• Following branch rules to be enforced as per the document;
• https://h2oai.atlassian.net/wiki/spaces/DEVOPS/pages/3921739777/GitHub+Repository+Baseline+Settings

Changed

• All other changes will be done after confirmation to proceed with the other requirements.

Parent Issue

• https://github.com/h2oai/h2o-infra/issues/366

[mturoci]

@ChathurindaRanasinghe I believe all the requirements have been met as per the doc. Could you please have a look? Once approved, this PR can be closed I believe.

[mturoci]

Closing this PR as the changes were approved via a private DM.