Maniphest T240679

Create a threat model for new CI
Closed, DeclinedPublic
Actions

Assigned To

• LarsWirzenius

Authored By

	• LarsWirzenius
	Dec 13 2019, 2:34 PM

Project Tags

Referenced Files

None

Subscribers

View All 10 Subscribers

Description

To help gather security related requirements for new CI, create a threat model for it.

The document for this is at https://www.mediawiki.org/wiki/User:LarsWirzenius/NewCI/threats.

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		• LarsWirzenius	T217325 Consider and evaluate possible new CI tooling
		Declined		• LarsWirzenius	T240679 Create a threat model for new CI
		Resolved		• LarsWirzenius	T240943 Security Concept Review For new CI

Event Timeline

• LarsWirzenius created this task.Dec 13 2019, 2:34 PM

• LarsWirzenius updated the task description. (Show Details)Dec 13 2019, 2:44 PM

• LarsWirzenius moved this task from INBOX to Doing on the Release-Engineering-Team-TODO (201912) board.Dec 13 2019, 2:55 PM

• zeljkofilipin removed a project: User-zeljkofilipin.Dec 16 2019, 2:17 PM

• zeljkofilipin unsubscribed.

For CI systems that run on k8s, this might be useful:

https://github.com/kubernetes/community/blob/master/wg-security-audit/findings/Kubernetes%20Threat%20Model.pdf

• LarsWirzenius mentioned this in T240943: Security Concept Review For new CI.Dec 17 2019, 12:32 PM

• LarsWirzenius added a subtask: T240943: Security Concept Review For new CI.

thcipriani triaged this task as Medium priority.Jan 6 2020, 2:09 AM

thcipriani edited projects, added: Release-Engineering-Team, Release-Engineering-Team-TODO (2020-01 to 2020-03 (Q3)); removed: Release-Engineering-Team-TODO (201912), Release-Engineering-Team (Kanban).

thcipriani moved this task from INBOX to New Work on the Release-Engineering-Team-TODO (2020-01 to 2020-03 (Q3)) board.

thcipriani edited projects, added: Release-Engineering-Team (CI & Testing services); removed: Release-Engineering-Team.

We had a second thread modelling meeting today. Notes on the threats page linked from the task description.

• chasemp mentioned this in Unknown Object (Task).Jan 17 2020, 10:24 PM

• chasemp changed the status of subtask T240943: Security Concept Review For new CI from Open to Stalled.Jan 21 2020, 8:54 PM

• chasemp closed subtask T240943: Security Concept Review For new CI as Resolved.Feb 20 2020, 6:59 PM

• LarsWirzenius edited projects, added: Release-Engineering-Team-TODO (2020-04 to 2020-06 (Q4)); removed: Release-Engineering-Team-TODO (2020-01 to 2020-03 (Q3)).Mar 30 2020, 4:23 PM

• LarsWirzenius moved this task from INBOX to New Work on the Release-Engineering-Team-TODO (2020-04 to 2020-06 (Q4)) board.Mar 30 2020, 4:25 PM

• LarsWirzenius lowered the priority of this task from Medium to Low.May 11 2020, 11:15 AM

thcipriani edited projects, added: Release-Engineering-Team-TODO (2020-07-01 to 2020-09-30 (Q1)); removed: Release-Engineering-Team-TODO (2020-04 to 2020-06 (Q4)).Jul 8 2020, 5:34 PM

• LarsWirzenius closed this task as Declined.Jul 10 2020, 1:04 PM