[Security Self-Assessment] Jaeger

[jw6680]

Details

Project Name: Jaeger

Github URL: https://github.com/jaegertracing/jaeger

CNCF project stage: Sandbox preparing for Incubation / Incubation preparing for Graduation / Graduated

• Graduation Proposal: https://github.com/jaegertracing/jaeger

Security Provider: No

Self-assessment link (before PR): Jaeger Security Self-Assessment

Tasks

• [ ] Stage 1: Preparation

  • [x] Create a GitHub issue for the security self assessment of Jaeger project.
    • [x] Issue Link in CNCF Tag-Security: https://github.com/cncf/tag-security/issues/1143
  • [x] Create a place holder of security self assessment.
    • [x] Create a fork of the CNCF Tag-Security in your Github.
    • [x] Create a new folder for the Jaeger project.
    • [x] Add the security self assessment template under the project folder.
    • [x] Issue link of Initial Commit: https://github.com/cp-57/tag-security/commit/5ea77286705c1537774244a8488a30dd887991b2
  • [x] Review Documentation of the Jaeger project.

• [ ] Stage 2: Understand the Project Landscape

  • [ ] Understand the overall project at a sufficient level of detail.
  • [ ] Update overview section
    • [ ] Background
      commit:
    • [ ] Actors
      commit:
    • [ ] Actions
      commit:
    • [ ] Goals
      commit:
    • [ ] Non-Goals
      commit:

• [ ] Stage 3: First complete draft of the Self Assessment

  • [ ] Document technical specifications of the project.
    • [ ] Self assessment use
      commit:
    • [ ] Security functions and features
      commit:
    • [ ] Project compliance
      commit:
    • [ ] Secure development practices
      commit:
    • [ ] Security issue resolution
      commit:
    • [ ] Appendix
      commit:
  • [ ] Complete the security self assessment draft.

• [ ] Stage 4: Iteration with the project

  • [ ] Initiate discussion with project maintainers.
  • [ ] Incorporate inputs and feedback from project maintainers.
  • [ ] Document the findings.

• [ ] Stage 5: Finalization

  • [ ] Initiate PR
  • [ ] Get feedback and findings from reviewers
  • [ ] Fix the findings
  • [ ] Merge the PR
  • [ ] Close the issue