On 18/07/18 22:24, Paul Belanger wrote:
Greetings,
With recent Jenkins security advisory today, I realized we just imported the
current secrets from jenkins into zuulv3. I'd like to propose, just to be extra
safe, we preform a re-key of everything that uses secrets.
I'm not sure if this has every been done with jenkins, but we should also
consider some policy to re-key everything ever x months too.
Thoughts?
_______________________________________________
dev mailing list
dev(a)lists.rdoproject.org
http://lists.rdoproject.org/mailman/listinfo/dev
To unsubscribe: dev-unsubscribe(a)lists.rdoproject.org
The current CBS credentials for RDO have never been into Jenkins.
Regards,
H.