menmarc
menmarc
Our AVA assessor (Keith Douglas) mentionned we should use a tool like Sonarqube for better static code analysis. Does such tool exists within DAaas ? Is there any best practices...
We would like to have the following URL for the vetting application in TEST: https://org-ces-system-disclosure-vetting.aaw-test.cloud.statcan.ca/ Thank you
Our AVA assessor (Keith Douglas) noticed that the database instance "daaasvettingprod.postgres.database.azure.com" is exposed to the internet. He recommands to not have data store exposed to the internet. Is there something...
The vetting application URL in Dev (https://org-ces-system-disclosure-vetting.aaw-dev.cloud.statcan.ca/) is exposed to the internet which shouldn't happen. It should be internal to Statistiques Canada network. How can we fix this ?
Our AVA assessor (Keith Douglas) noticed that there's a mysql instance running in prod (see first row) Not shown: 993 filtered tcp ports (no-response) PORT STATE SERVICE REASON VERSION 3306/tcp...
Our AVA assessor, Keith Douglas, recommands that we integrate in our development pipeline a tool that would do dynamic vulnerability scanning. He mentionned a tool called DVS Zap. Is there...
We need to have a DEV environment to test our cronjob made for "AAW Financial Data Reconciliation" project. I'm not exactly sure technically what it implies on AAW side but...
Eventually we would like to perform a volume test on the Vetting Management Application to make sure it can handle the amount of users expected on the platform long term....
Elastic search hasn't logged any Vetting Application logs since Feb 27. Can someone look into why this is happening ? Elastic search instance and vetting application is in org-ces-system namespace....