New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Annual security review 2025: Secrets Management #1726

Open

4 tasks

OlgaLiber2 opened this issue Jan 18, 2025 · 0 comments

Open

4 tasks

Annual security review 2025: Secrets Management #1726

OlgaLiber2 opened this issue Jan 18, 2025 · 0 comments

Collaborator

OlgaLiber2 commented Jan 18, 2025 •

edited by ianliuwk1019

Loading

Describe the task
For each release, ensure that any new secrets are added to the Secrets Registry.

Annually, review the Secrets Registry, ensure it is up to date, and ensure that credentials are being rotated at least annually.

Acceptance Criteria

Refer to item #9
Consult Secrets Registry to rotate (or regenerate)/add/remove credentials if needed to DEV -> TEST then PROD
Make sure Secrets Registry is up to date
Some credential update might be challenging, for example BCSC or IDIM, if that's the case, may need to create separate tickets for appropriate procedure for them to be updated if necessary.

Additional context

Maybe discuss the need of Secrets Registry for FOM and IDIM-Proxy?
Or here

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment