search

zalando-stups / yourturn

The frontend/developer console for the STUPS infrastructure
http://docs.stups.io/en/latest/components/yourturn.html
Apache License 2.0
8 stars 7 forks source link

Remove whitelists and add deprecation comments #585

Closed yousifalraheem closed 2 years ago

yousifalraheem commented 2 years ago

Description

A file is generated every time YourTurn docker pod runs that holds mostly links. However, it also includes a list of whitelisted users which is a vulnerability according to a Collibra report.

After discussing possible solutions and current implementation it has been decided to remove the whitelists from the environment file.

tkrop commented 2 years ago

:+1:

leviferreira commented 2 years ago

👍