Skip to content

Commit e2047e4

Browse files
committed
adjust inventory of artifacts
1 parent 40632ff commit e2047e4

1 file changed

Lines changed: 4 additions & 5 deletions

File tree

data/BuildandDeployment.yml

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -206,15 +206,14 @@ Deployment:
206206
Inventory of running artifacts:
207207
risk: In case a vulnerability of severity high or critical exists, it needs to be known where an artifacts with that vulnerability is deployed with which dependencies.
208208
Measure: A documented inventory or a possibility to gather the needed information (e.g. the documentation of which script needs to be run by whoom) must be in place.
209-
implementation: Kubernetes Admission Controller can whitelist registries and/or whitelist a signing key.
210209
dependsOn:
211210
- Defined deployment process
212211
difficultyOfImplementation:
213-
knowledge: 1
214-
time: 1
215-
resources: 1
212+
knowledge: 2
213+
time: 2
214+
resources: 3
216215
usefulness: 3
217-
level: 1
216+
level: 3
218217
samm2: o-incident-management|TODO
219218
Patch Management:
220219
A patch policy is defined:

0 commit comments

Comments
 (0)