Story (Required)

As a Security Architect trying to complete the Threat Model RH-SDL control I want all findings from the Thread Model inside the SDElements tool to be corrected.

Background (Required)

In order for a product to go GA at Red Hat, it needs to have performed the RH-SDL process. One of the items inside RH-SDL is Threat Modeling. As part of the Threat Model, weaknesses and countermeasures have been found for S2I and these need to be addressed, in order for the product to go GA.

Out of scope

n/a

Approach (Required)

All findings, which are added here as sub-tasks to this story, have to have a due date and an assignee. Countermeasures have to be implemented before the due date.

Dependencies

n/a

Acceptance Criteria (Mandatory)

• Step 1: All findings have a due date and an assignee
• Step 2: All findings have their countermeasures implemented

INVEST Checklist

n/a

Done Checklist

• Code is completed, reviewed, documented and checked in
• Unit and integration test automation have been delivered and running cleanly in continuous integration/staging/canary environment
• Continuous Delivery pipeline(s) is able to proceed with new code included
• Customer facing documentation, API docs etc. are produced/updated, reviewed and published
• Acceptance criteria are met