search

cmu-sei / Polar

Polar is a secure and scalable knowledge graph framework, designed to address the challenges posed by building big data systems in highly regulated environments, and improve observability for DevSecOps Organizations.
Other
12 stars 1 forks source link

Regarding Polar Use Cases #11

Open RajikaJain opened 5 months ago

RajikaJain commented 5 months ago

We have successfully set up the Polar framework in our environment and are now able to retrieve and display information about our GitLab groups, users, and repositories/projects. The setup is working as expected, and we are receiving detailed outputs.

Could you please provide guidance on how we can make the best use of these insights? Specifically, we are interested in:

Best practices for utilizing the information about GitLab groups, users, and repositories, CI/CD to enhance project management and security. Recommendations on integrating Polar insights into our existing workflows for continuous improvement and efficiency. Examples of how other organizations have leveraged Polar for tangible benefits. Any additional features or configurations that could further enhance our use of the framework(Gitlab Runner). We are eager to understand how to maximize the value of Polar in our DevSecOps environment and ensure we are leveraging its full potential. Screenshot (985)

vonjackets commented 4 months ago

Hi, sorry for the delay on this, the holiday took away some attention! Right now the info pulled is from gitlab alone, but our intention is for users to be able to ask more detailed questions of their deployed infra such as. "How many users are on this project?" vs. "How many users need to be there?" "What do they have the permission to see, and should they have it?" "What machines are our pipelines running on and how are they configured? Who has access to them?" Etc. "How many pipelines have failed over the last X days/weeks?" "Are there any projects that haven't been touched lately? Why? Could they be taking up space?"

Polar is still very early in development and it's not our intention for Gitlab to be the only resource available to be observed. Other agents have been proposed for services like AWS and Microsoft Azure, Kubernetes, and other APIs. Hope this helps!