New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Chore]: Warn against and deprecate using a witness configuration file. #542

Open

3 tasks

jkjell opened this issue Jan 14, 2025 · 0 comments

Open

3 tasks

[Chore]: Warn against and deprecate using a witness configuration file. #542

jkjell opened this issue Jan 14, 2025 · 0 comments

Member

jkjell commented Jan 14, 2025

Describe the solution you'd like:

In response to this security advisory, support to configuration files should be deprecated and schedule for removal.

Documentation changes required:

Document recommendations against using a configuration file in production
Document deprecation of configuration file
Complete removal of support for configuration file use

jkjell mentioned this issue

security: respond to weaknesses identified in the in-toto sec audit #268

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment