Page MenuHomePhabricator

Ensure that all deployed nodejs services have regular dependency security scanning
Open, Needs TriagePublic

Description

LibUp currently scans and reports on all repositories under the mediawiki/services/* hierarchy on Gerrit, but not all services are under that (e.g. termbox).

We should sync with https://gerrit.wikimedia.org/r/plugins/gitiles/operations/deployment-charts/+/refs/heads/master/helmfile.d/services/ and make sure everything in there is in the LibUp configuration.

Event Timeline

I think the missing repos appear to be:

  • wikibase/termbox
  • eventgate-wikimedia
  • research/mwaddlink (written in Python)
  • blubber (golang)