Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Microcks security self-assessment #1451

Merged
merged 22 commits into from
Mar 12, 2025
Merged

Add Microcks security self-assessment #1451

merged 22 commits into from
Mar 12, 2025

Conversation

yada
Copy link
Contributor

@yada yada commented Mar 5, 2025

Add Microcks security self-assessment:

As part of our ongoing efforts to level up to CNCF Incubation, we have added a Microcks security self-assessment to our work-in-progress roadmap.

To reinforce our commitment to this task and deepen our understanding, both Microcks maintainers have completed the Linux Foundation Training & Certification: Security Self-Assessments for Open Source Projects (LFEL1005).

See our certifications here:

We're looking forward to the TAG review, feedback, and improvements to see how well we've applied the training lessons and to further strengthen Microcks' security posture 🚀

Signed-off-by: Yacine Kheddache <yacine@microcks.io>
Copy link

netlify bot commented Mar 5, 2025

Deploy Preview for tag-security ready!

Name Link
🔨 Latest commit b9c2611
🔍 Latest deploy log https://app.netlify.com/sites/tag-security/deploys/67d036c4d015760008b6e295
😎 Deploy Preview https://deploy-preview-1451--tag-security.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

yada added 14 commits March 5, 2025 20:03
Signed-off-by: Yacine Kheddache <yacine@microcks.io>
Signed-off-by: Yacine Kheddache <yacine@microcks.io>
Signed-off-by: Yacine Kheddache <yacine@microcks.io>
…c instead of long link

Signed-off-by: Yacine Kheddache <yacine@microcks.io>
…ngth again

Signed-off-by: Yacine Kheddache <yacine@microcks.io>
…ngth again.

Signed-off-by: Yacine Kheddache <yacine@microcks.io>
Signed-off-by: Yacine Kheddache <yacine@microcks.io>
Signed-off-by: Yacine Kheddache <yacine@microcks.io>
Signed-off-by: Yacine Kheddache <yacine@microcks.io>
Signed-off-by: Yacine Kheddache <yacine@microcks.io>
Signed-off-by: Yacine Kheddache <yacine@microcks.io>
Signed-off-by: Yacine Kheddache <yacine@microcks.io>
…rds for Odier

Signed-off-by: Yacine Kheddache <yacine@microcks.io>
@yada
Copy link
Contributor Author

yada commented Mar 5, 2025

All checks have passed 🥵 Now, let's shift our focus to reviewing the content!
I am looking forward to the TAG Security feedback and collaborating on merging our assessment.

@eddie-knight
Copy link
Collaborator

Hey @yada, the STAG leads will review this at the soonest opportunity!

If you'd like to get a focused discussion with other collaborators, feel free to bring this up on a community call next week

@yada
Copy link
Contributor Author

yada commented Mar 7, 2025

Hey @yada, the STAG leads will review this at the soonest opportunity!

If you'd like to get a focused discussion with other collaborators, feel free to bring this up on a community call next week

Thank you very much, @eddie-knight and the STAG leads and collaborators. We have done our best based on the self-assessment objectives and our understanding. We look forward to your insights and the perspectives of security experts. We are happy to join your community meeting if we have any specific questions.

…7 to 99

Signed-off-by: Yacine Kheddache <yacine@microcks.io>
Copy link
Collaborator

@JustinCappos JustinCappos left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks quite good! I have a few minor comments / requests for changes, but it's almost ready to merge.

yada added 3 commits March 10, 2025 23:38
…vulnerability

Signed-off-by: Yacine Kheddache <yacine@microcks.io>
… improve clarity and understanding.

Signed-off-by: Yacine Kheddache <yacine@microcks.io>
Signed-off-by: Yacine Kheddache <yacine@microcks.io>
@yada
Copy link
Contributor Author

yada commented Mar 11, 2025

Looks quite good! I have a few minor comments / requests for changes, but it's almost ready to merge.

Thank you, @JustinCappos, for the review and improvements requested / suggested. Everything is done and updated now to improve clarity and understanding.

…background section

Signed-off-by: Yacine Kheddache <yacine@microcks.io>
@yada yada requested a review from JustinCappos March 12, 2025 09:54
Copy link
Collaborator

@JustinCappos JustinCappos left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Okay, looks good. Thanks for the improvements!

@JustinCappos JustinCappos merged commit 3b36c32 into cncf:main Mar 12, 2025
10 checks passed
@yada
Copy link
Contributor Author

yada commented Mar 12, 2025

Okay, looks good. Thanks for the improvements!

Thank you, @JustinCappos, for your support and the review and feedback for improvement 👍
I just noticed that the two images:

  1. Microcks actions
  2. Microcks actions

I will update 2/ as I just noticed this issue s/actions/ecosystem/ ;-)
See: #1458

Are not visible online:
https://tag-security.cncf.io/community/assessments/projects/microcks/self-assessment/

We have a 404 error on both:

  1. https://tag-security.cncf.io/community/assessments/projects/microcks/self-assessment/images/architecture-full.png
  2. https://tag-security.cncf.io/community/assessments/projects/microcks/self-assessment/images/microcks-cloud-native-ecosystem.png

Do you know how we can fix this? It looks like images/* are not synced.

PS: I noticed that all self-assessments with images have the same issue, ex, CloudEvents.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants