GoogleCloudPlatform / GoogleCloudPlatform/pubsec-declarative-toolkit
remove security control tags from the experimentation packages
Open
security-controls
ssc
- Dominant language
- Shell
- Stars
- 36
- Forks
- 26
- PR merge metrics
- No merged PRs in 30d
Description
as a security admin, I have no interest in the security control tag for the experimentation packages. The experimentation environment needs to meet the profile 1 guardrails only. Furthermore, no authority to operate will ever be sought or obtained for this environment.
as a platform engineer/developer, I should not maintain the security control tags for packages if they are not useful.
The recommended solution is :
remove securitycontrols.md file from experimentation packages
remove securty control tags within all yaml files of the experimentation packages
Contributor guide
Assessment
This issue has not been assessed yet.