Skip to content

Commit 5aa45fd

Browse files
authored
change list to string
1 parent eb86d80 commit 5aa45fd

File tree

1 file changed

+5
-6
lines changed

1 file changed

+5
-6
lines changed

src/assets/YAML/default/BuildAndDeployment/Deployment.yaml

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -311,13 +311,12 @@ Build and Deployment:
311311
evidence: ""
312312
comments: ""
313313
Evaluation of the trust of used components:
314-
risk:
315-
- Application and system components like Open Source libraies or images can have implementation flaws or deployment flaws.
316-
- Developers or operations might start random images in the production cluster
317-
which have malicious code or known vulnerabilities.
314+
risk:
315+
Application and system components like Open Source libraies or images can have implementation flaws or deployment flaws.
316+
Developers or operations might start random images in the production cluster which have malicious code or known vulnerabilities.
318317
measure:
319-
- Each components source is evaluated to be trusted. For example the source, number of developers included, email configuration used by maintainers to prevent maintainer account theft, typo-squatting, ...
320-
- Create image assessment criteria, perform an evaluation of images and create a whitelist of artifacts/container images/virtual machine images.
318+
Each components source is evaluated to be trusted. For example the source, number of developers included, email configuration used by maintainers to prevent maintainer account theft, typo-squatting, ...
319+
Create image assessment criteria, perform an evaluation of images and create a whitelist of artifacts/container images/virtual machine images.
321320
difficultyOfImplementation:
322321
knowledge: 3
323322
time: 3

0 commit comments

Comments
 (0)