Skip to content

[ENHANCEMENT] document process to recover old but deleted GitHub Releases #4654

@jessesimpson36

Description

@jessesimpson36

Describe the use case:

helm.camunda.io is hosted in github pages, and references links to GitHub Releases to deliver camunda helm charts whenever someone calls helm install. In the event that a bad actor deletes the github release, or uploads malicious data into an old helm chart, we need to have a way to recreate the GitHub Release so that we can recover from that scenario.

This could include

  1. recovering helm charts from local helm cache
  2. checking out an old commit and running helm package
  3. try to get old commits github actions workflows working
  4. ...

But we should identify those strategies and prioritize which is the best.

Describe the enhancement/feature:

Desired outcome and acceptance tests:

Metadata

Metadata

Assignees

No one assigned

    Labels

    area/securityMarks an issue as improving security of the projectkind/enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions