Test should cover attacks over:
- LDAP - Kerberos - RPC - DNS
protocols. The tests should be part of the CI automation.
Metadata Update from @dpal: - Issue assigned to someone - Issue set to the milestone: Ticket Backlog
To narrow down the scope of what this issue is asking for: Static code testing? Dynamic code testing? Code quality? Does Pagure have some kind of integrate security tools to assist projects?
There are some GitHub apps that could potentially be integrated do some of these tasks with the GitHub mirror. I am not sure if any of them are free. https://github.com/marketplace?type=apps&category=code-quality https://github.com/marketplace?type=apps&category=code-review https://github.com/marketplace?type=apps&category=security
One such workflow I could see is a git commit is made, RPMs are created, a container is then built, a scan is run to test the web server and the cli tools, a report is generated and distributed/posted somewhere.
Log in to comment on this ticket.