Page MenuHomePhabricator
Create Task
Maniphest T289292

Create Security Team group within gitlab.wikimedia.org
Closed, ResolvedPublic1 Estimated Story Points
Actions

Description

Per our previous email discussion, I think it would be valuable to create a "Security Team" group within gitlab.wikimedia.org for the initial application security pipeline work. And because we'll likely we want it as we migrate our own projects over to Gitlab, at the very least.

Related Objects
Search...

StatusSubtypeAssignedTask
 ResolvedsbassettT289290 Design and Build Application Security Pipeline Components for Gitlab
 ResolvedbrennenT289292 Create Security Team group within gitlab.wikimedia.org
 ResolvedsbassettT289293 Create initial proof of concept application security pipeline repository
 Invalid• thciprianiT294306 Migrate existing proof-of-concept node ci templates to slim node wm node docker images
 InvalidNoneT294307 Research and design basic ci processing scripts (to exit 1 for tools that report errors and generate report artifacts)
 ResolvedsbassettT294309 Finish node/npm initial tool ci templates for npm audit (Node 10, 12, 14)
 ResolvedsbassettT294310 Finish for node/npm initial tool ci templates for npm outdated (Node 10, 12, 14)
 ResolvedsbassettT294311 Finish node/npm initial tool ci templates for auditjs (Node 10, 12, 14)
 ResolvedmmartoranaT294312 Investigate SAST template options now included with Gitlab CE and formulate use-cases and documentation
 ResolvedsbassettT294596 Add minimal yaml file linting as part of ci for security ci templates repository
 ResolvedsbassettT295333 Create a simple tool to check for bidirectional unicode characters
 ResolvedmmartoranaT295374 Create best practices / guidelines documentation for Gitlab application security ci templates
 Resolved• thciprianiT296805 Confirm with releng which docker images make the most sense to use
 ResolvedsbassettT296806 Find optimal solution for projects with nested package.json files (within the context of Gitlab CI)
 ResolvedsbassettT297991 Create semgrep initial tool ci template
 ResolvedsbassettT301828 Create local-php-security-checker/php-security-checker ci yaml template
 ResolvedmmartoranaT301829 Create composer outdated ci yaml template
 ResolvedsbassettT301830 Create safety (w/ poetry support) ci yaml template
 ResolvedmmartoranaT301831 Create nancy ci yaml template
 ResolvedsbassettT301832 Create phan/phan-taint-check plugin port as ci template
 ResolvedsbassettT301833 Create python bandit ci template
 ResolvedmmartoranaT301834 Create gosec ci yaml template
 ResolvedsbassettT303482 Merge templates that are part of initial release to production branch

Event Timeline

sbassett created this task.Aug 19 2021, 7:16 PM
sbassett moved this task from Incoming to In Progress on the Security-Team board.
sbassett mentioned this in T289293: Create initial proof of concept application security pipeline repository.Aug 19 2021, 7:22 PM
sbassett added a comment.Aug 19 2021, 8:56 PM

Looks like the group was created - thanks! Can we also add @Reedy and @Mstyles as members? I tried, but don't think I have permissions to do so...

brennen added a comment.Aug 19 2021, 8:59 PM

So I created people/wmf-team-security and a top-level security group for projects. The scheme we have going is that groups under people/ are used to contain individuals, and then those groups are granted access to project namespaces.

Reedy and Mstyles will need to log in to GitLab to initialize their accounts, and then we can add them to the team group.

• thcipriani edited projects, added: Release-Engineering-Team (Done by Fri 03 Sep); removed: Release-Engineering-Team.Aug 23 2021, 4:12 PM
• thcipriani set the point value for this task to 1.
brennen claimed this task.Aug 23 2021, 4:13 PM
brennen added a project: User-brennen.
sbassett added a comment.Aug 23 2021, 4:24 PM

@brennen - thanks, the groups looks good to me, for now. Can you also add https://gitlab.wikimedia.org/mstyles to people/wmf-team-security?

brennen closed this task as Resolved.Aug 23 2021, 8:37 PM
brennen moved this task from Backlog to Done or Declined on the User-brennen board.

thanks, the groups looks good to me, for now. Can you also add https://gitlab.wikimedia.org/mstyles to people/wmf-team-security?

Done!

Reedy added a comment.Sep 2 2021, 7:22 PM

I've logged in (finally). If someone wants to add me to people/wmf-team-security that'd be appreciated :)

• thcipriani added a comment.Sep 5 2021, 8:41 PM
In T289292#7329364, @Reedy wrote:

I've logged in (finally). If someone wants to add me to people/wmf-team-security that'd be appreciated :)

Done!

• sguebo_WMF mentioned this in T291094: Add "Samuel (WMF)" account to Security Team group in gitlab.wikimedia.org.Sep 15 2021, 4:20 PM
sbassett changed the status of subtask T289293: Create initial proof of concept application security pipeline repository from Open to Stalled.Sep 29 2021, 7:00 PM
sbassett changed the status of subtask T289293: Create initial proof of concept application security pipeline repository from Stalled to In Progress.Mar 16 2022, 4:32 PM
sbassett closed subtask T289293: Create initial proof of concept application security pipeline repository as Resolved.Apr 6 2022, 7:22 PM
sbassett added a project: GitLab-Application-Security-Pipeline.Jul 13 2023, 7:34 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits