search

elekto-io / elekto

Software for the Elekto online elections system
https://elekto.io
Apache License 2.0
30 stars 19 forks source link

Implement security recommendations #51

Closed jberkus closed 2 years ago

jberkus commented 2 years ago

We have had a security audit by the Kubernetes security team. They helpfully identified a number of areas of improvement for Elekto, both the core code and the deployment of it.

These recommendations are confidential until fixes are implemented. The one that is already public is the one about cancelling ballots: #49.

ameukam commented 2 years ago

areas of improvement for Elekto,

Happy to work on the infrastructure (if needed) aspect of those suggested improvements.

007vedant commented 2 years ago

Hey @jberkus !. I'd be happy to work on this issue under LFX Mentorship'22. I'm expert in Python programming, have an extensive experience in backend development with Flask and Django and have solid fundamentals in SQL and databases.

richardgreg commented 2 years ago

Hi, @jberkus I'm an LFX mentee and I'm interested in working on the improvements for Elekto. I'll be submitting my cover letter and resume detailing my relevant skills and experience. Please let me know of any other initial tasks needed. Thanks.

jberkus commented 2 years ago

@007vedant @richardgreg glad to hear from you! Look forward to your LFX applications.

khabdrick commented 2 years ago

@jberkus Do potential mentees have to make contributions to the project before they can be considered for the program?

jberkus commented 2 years ago

@khabdrick no, although we will be looking for some kind of work on the related technologies.

aastha0326 commented 2 years ago

Hey @jberkus The concept of Elekto got me interested. I feel it would be great if I get an opportunity to work on its improvements. I am proficient in python programming. This project seems to be in alignment with my tech stack. I would be glad to connect with the community and work on it this spring.

RajGM commented 2 years ago

I would love to work on this as well.

monalisha31 commented 2 years ago

@jberkus This project seems very interesting. I am interested in working on it as a LFX mentee this spring. I have submitted the cover letter and CV as well. Looking forward to your feedback.

Dabjazz commented 2 years ago

Hello, @jberkus I went through the website of Elekto, I am happy to help and contribute to this project. I can help with improving the documentation, adding recipes, and many other guides as well. Looking forward to working on this project as an LFX mentee and enhancing my knowledge of K8S.

kalkayan commented 2 years ago

We have selected @007vedant as the mentee for this term of the mentorship. Thanks, everyone for your interest in Elekto and for taking the time to submit your applications.

jberkus commented 2 years ago

This is resolved, with the release of 0.6.0. Good work, @007vedant !