[Security Self-Assessment] Antrea

[molofgarb]

Details

Project Name: Antrea

Github URL: https://github.com/antrea-io/antrea

CNCF project stage: Sandbox preparing for Incubation

• Sandbox Proposal: https://github.com/cncf/sandbox/issues/243

Security Provider: No

Self-assessment link (before PR): Antrea Security Self-Assessment

Tasks

• [x] Stage 1: Preparation

  • [x] Create a GitHub issue for the security self assessment of Antrea project.
    • [x] Issue Link in CNCF Tag-Security: https://github.com/cncf/tag-security/issues/1142
  • [x] Create a place holder of security self assessment.
    • [x] Create a fork of the CNCF Tag-Security in your Github.
    • [x] Create a new folder for the Antrea project.
    • [x] Add the security self assessment template under the project folder.
    • [x] Issue link of Initial Commit: https://github.com/molofgarb/tag-security-11/tree/5390e86397b707f60067ec6917b03803e7802fde
  • [x] Review Documentation of the Antrea project.

• [ ] Stage 2: Understand the Project Landscape

  • [ ] Understand the overall project at a sufficient level of detail.
  • [ ] Update overview section
    • [x] Background
      commit: https://github.com/molofgarb/tag-security-11/commit/61ad3115c23920c21cd6c40ccc389c3491d5e068
    • [ ] Actors
      commit:
    • [x] Actions
      commit: https://github.com/molofgarb/tag-security-11/commit/61ad3115c23920c21cd6c40ccc389c3491d5e068
    • [ ] Goals
      commit:
    • [x] Non-Goals
      commit: https://github.com/molofgarb/tag-security-11/commit/61ad3115c23920c21cd6c40ccc389c3491d5e068

• [ ] Stage 3: First complete draft of the Self Assessment

  • [ ] Document technical specifications of the Antrea project.
    • [x] Self assessment use
      commit: https://github.com/molofgarb/tag-security-11/commit/bedc054fee05f2cca9779db4f72296125bb00d9f
    • [ ] Security functions and features
      commit:
    • [ ] Project compliance
      commit:
    • [x] Secure development practices
      commit: https://github.com/molofgarb/tag-security-11/commit/9cfad3696053a833b20a808853963e1a8f222b20
    • [ ] Security issue resolution
      commit:
    • [ ] Appendix
      commit:
  • [ ] Complete the security self assessment draft.

• [ ] Stage 4: Iteration with the project

  • [ ] Initiate discussion with Antrea project maintainers.
  • [ ] Incorporate inputs and feedback from Antrea project maintainers.
  • [ ] Document the findings.

• [ ] Stage 5: Finalization

  • [ ] Initiate PR
  • [ ] Get feedback and findings from reviewers
  • [ ] Fix the findings
  • [ ] Merge the PR
  • [ ] Close the issue

[molofgarb]

issue will be tracked in https://github.com/Rana-KV/tag-security/issues/2