arroway/infosec.mozilla.org

Guidelines, principles published on https://infosec.mozilla.org

infosec.mozilla.org's Issues

Add a "DONE" tag to detect and count closed recommendations

Support "naming version" in rra menu for rra doc

Add finer counts for open recommendations depending on risk level

Automatically file bugs for recommendations in Bugzilla

Once the RRA is marked complete (maybe we could add a button in the RRA menu to trigger this)

Detect Foxsec-related issues owned by Mozilla Archive or another reviewer

Refactor code for copying rows from ons sheet to another

In :

• copyHighPriority();
• copyMaxRecommendation();
• copyHighNumRecommendations();

Automate triggers for updating RRA list

Retrieve last reviewed time

So we can compare it to the last modification time

Consider moving recommendation rating to P1, P2, P3, P4

Instead of maximum, high, medium and low.
This is to make bug filing and tracking more coherent with how we usually triage bugs.
Also, this would prevent sending mixed signals regarding risk evaluation, e.g when a "low" rated service has a "maximum" risk recommendation.

Improve UI messages when importing and processing RRAs documents

Add toast messages to indicate status.

Consider retrieving the list of FoxSec related services from the metadata

Add a tag to mark decommissioned services