Stewart X Addison
Stewart X Addison
Plan of attack for some of the more important parts of SSDF during 2023. Note that I've tentatively planned in two months for each phase of this, so the estimated...
@tellison The MFA one for infra was mostly in phase 3 because there was quite a lot in 2 and I didn't want to take anything out, but I'm shifting...
Noting that we intend to have a third party perform an audit on parts of this, so that process will cover part of this.
Note that we have volunteered for an eclipse project to use an external party to perform an analysis of our project security that will be commencing soon.
The audit described above started last week (Monday 15th December) and is progressing.
Security policy is documented at https://github.com/adoptium/infrastructure/security/policy
Noting that [test-marist-rhel8-s390x-2](https://ci.adoptium.net/computer/test%2Dmarist%2Drhel8%2Ds390x%2D2) probably has our only environment suitable for reproducing this if needed, although it has been commandeered for build work at the moment.
@gnu-andrew Finally got around to looking at this (and this comment will stop the bot trying to close it!) and performed an initial test on Linux/aarch64 before trying elsewhere. I...
Solaris build of this branch using our default Sun Studio compiler seems to build ok (x64 and SPARC) 👍🏻
@smlambert If we do this the performance test results will not be comparable before and after. Will that cause any problems, or are we not looking at the results closely...