Security risks are mitigated to best knowledge - Githubissues

stackabletech / issues

This repository is only for issues that concern multiple repositories or don't fit into any specific repository

2 stars 0 forks source link

Security risks are mitigated to best knowledge #474

Closed Maleware closed 9 months ago

Maleware commented 11 months ago

Using a custom runner within a publice repository is introducing security risks.

For now we introduced a VM instance on bare metal. Within the VM we have k3s cluster running which is connected to GH. Every workflow is creating an instance which gets thrown away after every run.

This needs to be done:

[ ] Evaluate the implied security risks and measures against it.
[ ] Hardening security as evaluated.

This is done when:

[ ] Security risks are meaningfully mitigated.

fhennig commented 9 months ago

not relevant anymore