Proposal: SLA for Web Application Core and Plugin Updates Schedule

[awilliams1275]

Write a proposal for Website Application Plugin and Core Updates Schedule

Items to consider:

• Application agnostic:
  • should apply to all website applications used at Posit
• Vulnerability level response:
  • low, medium, high, critical
  • timeframe to remediate each vulnerability level
• Schedule for frequency of plugins scanning and review

[awilliams1275]

I now have access to Snyk

What DNS records: Talk to Patrick A. in Sept.: Jira Assets: JSS said he would speak to Rick, but needs to adapt script for DNS before this happens

Snyk has CI w/Git but did not see any way to import repos into Snyk