SACGF / variantgrid

VariantGrid public repo
Other
23 stars 2 forks source link

DevRecS2 - Improve package management to lessen supply chain attack possibilities. #1165

Open TheMadBug opened 3 weeks ago

TheMadBug commented 3 weeks ago

This might be a bit of a side issue from the original recommendation, but in order to support DevRecS3:

Make barriers between Django apps / services more explicit, and defined.

Ability to fully disable some apps.

Look at lesser used 3rd party packages, see if they can be removed.

Make things like the variant annotation invoking code completely self contained - so in future it could be run in its own virtual environment calling over some file/network API. ( Relies on #1126 )