This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Talk:CRV2 SecDepConfig

From OWASP

Revision as of 21:38, 5 June 2013 by Simon Whittaker (talk | contribs) (Trying to create structure of the page)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Jump to: navigation, search

I've put some notes in here for expansion, I realise I'm not down as the author but wanted to share some thoughts. These are sketchy notes atm but will expand.

The aim of the process is to ensure only users with required access have permission to push to production

Developer pushes to version control & submits pull request
Lead developer performs review process
Lead Developer pulls changes to master

Capistrano for automated deployment

Create capdeploy user on $evironment with write permissions on relevant directories
SSH key authentication only
Capistrano cap deploy $environment pushes to correct environment

Retrieved from "https://wiki.owasp.org/index.php?title=Talk:CRV2_SecDepConfig&oldid=152973"