https://wiki.owasp.org/index.php?action=history&feed=atom&title=Talk%3ACRV2_SecDepConfig 2026-04-26T13:54:42Z Revision history for this page on the wiki MediaWiki 1.27.2 https://wiki.owasp.org/index.php?title=Talk:CRV2_SecDepConfig&diff=165216&oldid=prev 2013-12-31T04:24:24Z

<p></p> <table class="diff diff-contentalign-left" data-mw="interface"> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;' lang='en'> <td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td> <td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 04:24, 31 December 2013</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l12" >Line 12:</td> <td colspan="2" class="diff-lineno">Line 12:</td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Capistrano ''cap deploy $environment'' pushes to correct environment</div></td><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Capistrano ''cap deploy $environment'' pushes to correct environment</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>*</div></td><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>*</div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">=== Comment ===</ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Sorry, I missed this comment before adding content, and I had a very different interpretation.&#160; Since this is a code review guide, I interpreted &quot;Secure Deployment Configuration&quot; as guidelines for reviewing web application deployment configuration to ensure the deployed configuration is secure.&#160; Secure deployment of files to production is of course also important, but I'm not sure it is a code review topic.&#160; Of course, we can revert all my additions and I can try to put some content in on authorized deployment to production.&#160; --[[User:Jerry Kickenson|Jerry Kickenson]] ([[User talk:Jerry Kickenson|talk]]) 22:24, 30 December 2013 (CST)</ins></div></td></tr> </table>

Jerry Kickenson https://wiki.owasp.org/index.php?title=Talk:CRV2_SecDepConfig&diff=152973&oldid=prev 2013-06-05T21:38:32Z

<p>Trying to create structure of the page</p> <p><b>New page</b></p><div>I've put some notes in here for expansion, I realise I'm not down as the author but wanted to share some thoughts. These are sketchy notes atm but will expand.<br /> <br /> The aim of the process is to ensure only users with required access have permission to push to production<br /> <br /> * Developer pushes to version control &amp; submits pull request<br /> * Lead developer performs review process<br /> * Lead Developer pulls changes to master<br /> <br /> '''Capistrano for automated deployment'''<br /> * Create capdeploy user on $evironment with write permissions on relevant directories<br /> * SSH key authentication only<br /> * Capistrano ''cap deploy $environment'' pushes to correct environment<br /> *</div>

Simon Whittaker