Confirm AAW Jfrog - Authentication\Data Exfiltration

StatCan / aaw

Documentation for the Advanced Analytics Workspace Platform

https://statcan.github.io/aaw/

Other

67 stars 12 forks source link

Open esneek opened 3 weeks ago

esneek commented 3 weeks ago

The VRS project would like to open the flow to AAW Jfrog for package management. Before that, we would like to confirm the following:

users cannot upload packages
anyone can access it (not authenticated)
the process to upload packages - who does it?
If we open the flow to AAW Jfrog, there is not risk that users can upload files then access from the Internet.