Maniphest T105251

Deploy automated dynamic scanning of MediaWiki in beta
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• dpatrick
	Jul 8 2015, 11:37 PM

Tags

Referenced Files

None

Subscribers

Description

See https://www.mediawiki.org/wiki/Wikimedia_Security_Team/Goals_201516.

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		• dpatrick	T105251 Deploy automated dynamic scanning of MediaWiki in beta
		Resolved		• dpatrick	T105250 Build new server image on labs for automated scanning
		Resolved		• dpatrick	T105249 Consider Arachni as option for headless automated scanning
		Resolved		• dpatrick	T105248 Consider Zed Attack Proxy as option for headless automated scanning
		Resolved		• dpatrick	T105247 Consider Burp Proxy as option for headless automated scanning
		Resolved		• dpatrick	T105246 Document automated scanning requirements and goals

Event Timeline

• dpatrick created this task.Jul 8 2015, 11:37 PM

• dpatrick raised the priority of this task from to Needs Triage.

• dpatrick updated the task description. (Show Details)

• dpatrick added a project: Security-Team.

• dpatrick moved this task to Epics in progress on the Security-Team board.

• dpatrick subscribed.

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJul 8 2015, 11:37 PM

• dpatrick claimed this task.Jul 8 2015, 11:38 PM

• dpatrick triaged this task as Medium priority.

• dpatrick added subtasks: T105250: Build new server image on labs for automated scanning, T105249: Consider Arachni as option for headless automated scanning, T105248: Consider Zed Attack Proxy as option for headless automated scanning, T105247: Consider Burp Proxy as option for headless automated scanning, T105246: Document automated scanning requirements and goals.

• dpatrick set Security to None.

• dpatrick closed subtask T105246: Document automated scanning requirements and goals as Resolved.Jul 17 2015, 3:14 AM

• dpatrick closed subtask T105250: Build new server image on labs for automated scanning as Resolved.Sep 15 2015, 9:52 PM

• dpatrick closed subtask T105247: Consider Burp Proxy as option for headless automated scanning as Resolved.

• dpatrick closed subtask T105248: Consider Zed Attack Proxy as option for headless automated scanning as Resolved.

• dpatrick closed subtask T105249: Consider Arachni as option for headless automated scanning as Resolved.

• dpatrick closed this task as Resolved.Oct 13 2015, 11:58 PM

Scanning is running weekly, currently Monday mornings. Scans currently run from scanner00.security-tools.eqiad.wmflabs.

https://www.mediawiki.org/wiki/Wikimedia_Security_Team/ApplicationScanning

sbassett moved this task from Epics in progress to Our Part Is Done on the Security-Team board.Jun 11 2019, 6:10 PM