Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Compliance Hook for secrets #105

Open
kwiesmueller opened this issue May 18, 2018 · 0 comments
Open

Compliance Hook for secrets #105

kwiesmueller opened this issue May 18, 2018 · 0 comments

Comments

@kwiesmueller
Copy link

We got secrets that belong to customer system logins where the customer has special NDA and compliance rules.
In some cases, everybody working on the project has to both, agree to them, as well as understand them while working on the customer system.
While this is mostly the case at project start it might happen that new employees or team members start working on it and nobody thinks about this anymore.

To ensure people keep this in mind before gaining access, the feature request would be some kind of action before the secret request get's approved. When creating some secret it should be possible to add a compliance url linking to a wiki page or other document.
The user should see (or have to read this) before getting access. The person reviewing the request should have an extra step to acknowledge this as well to prevent "approve and run" actions.
This way we could at least remind people of those rules.

This could work as some kind of hook feature that allows adding actions (like this) on secret access, request and approval.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant