[Security Self Assessment] Operator Framework

[Brandonpinos]

Details

Project Name: Operator Framework

Github URL: https://github.com/operator-framework/operator-sdk

CNCF project stage: Incubation

• Incubation Proposal: - https://github.com/cncf/toc/pull/303

Security Provider: No

Self-assessment link (before PR):

Tasks

• [x] Stage 1: Preparation

  • [x] Create a GitHub issue for the security self assessment of Operator Framework project.
    • [x] Issue Link in CNCF Tag-Security: https://github.com/cncf/tag-security/issues/1137
  • [x] Create a place holder of security self assessment.
    • [x] Create a fork of the CNCF Tag-Security in your Github.
    • [x] Create a new folder for the Operator Framework project.
    • [x] Add the security self assessment template under the project folder.
    • [x] Issue link of Initial Commit: f6a0a31ff4b31e74243ed1f854403a7304e1e837
  • [x] Review Documentation of the Operator Framework project.

• [ ] Stage 2: Understand the Project Landscape

  • [ ] Understand the overall project at a sufficient level of detail.
  • [ ] Update overview section
    • [ ] Background
      commit:
    • [ ] Actors
      commit:
    • [ ] Actions
      commit:
    • [ ] Goals
      commit:
    • [ ] Non-Goals
      commit:

• [ ] Stage 3: First complete draft of the Self Assessment

  • [ ] Document technical specifications of the Operator Framework project.
    • [ ] Self assessment use
      commit:
    • [ ] Security functions and features
      commit:
    • [ ] Project compliance
      commit:
    • [ ] Secure development practices
      commit:
    • [ ] Security issue resolution
      commit:
    • [ ] Appendix
      commit:
  • [ ] Complete the security self assessment draft.

• [ ] Stage 4: Iteration with the project

  • [ ] Initiate discussion with Operator Framework project maintainers.
  • [ ] Incorporate inputs and feedback from Operator Framework project maintainers.
  • [ ] Document the findings.

• [ ] Stage 5: Finalization

  • [ ] Initiate PR
  • [ ] Get feedback and findings from reviewers
  • [ ] Fix the findings
  • [ ] Merge the PR
  • [ ] Close the issue