Spike: Evaluate the security risks involved in breaking down the image-promoter

kubernetes-sigs / promo-tools

Container and file artifact promotion tooling for the Kubernetes project

Apache License 2.0

144 stars 71 forks source link

Open LappleApple opened 9 months ago

LappleApple commented 9 months ago

[ ] Support the goal of breaking up the image promoter monolith by closely examining the code and describing how we could pursue a more modular design while avoiding/mitigating potential security risks

[ ] Present a 1-2 page proposal describing the necessary implementation steps and listing pros/cons/tradeoffs
[ ] Seek input from SIG members (and potentially SIG Security) and achieve buy-in so the group can reach consensus and move forward

ameukam commented 8 months ago

/cc

k8s-triage-robot commented 5 months ago

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

After 90d of inactivity, lifecycle/stale is applied
After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

xmudrii commented 5 months ago

/remove-lifecycle stale

k8s-triage-robot commented 2 months ago