From 661185155eb6cf27a01316251af872a0b4e9cab1 Mon Sep 17 00:00:00 2001 From: Glenda Garcia Date: Thu, 3 Aug 2023 16:06:29 -0400 Subject: [PATCH] updated the software requirements with latest additions Signed-off-by: Glenda Garcia --- .../Software Requirements - Triage Portal.md | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/Mentorship/Software Requirements - Triage Portal.md b/Mentorship/Software Requirements - Triage Portal.md index 13dfd7a0..ead12cc0 100644 --- a/Mentorship/Software Requirements - Triage Portal.md +++ b/Mentorship/Software Requirements - Triage Portal.md @@ -61,6 +61,17 @@ Establish functionality that will support the upload of a single SARIF file via - https://github.com/ossf/omega-triage-portal/pull/77 - Upload button not working because OSS Gadget could not download the package. Changed to the latest version of the OSS Gadget (Pull request # 77) - https://github.com/ossf/omega-triage-portal/pull/77 +- Patched the requirements file due to updates from dependabot (Pull request # 79) + - https://github.com/ossf/omega-triage-portal/pull/79 +- Fixed other package compatibility issues and added to the tool defect to save the user that the finding had been assigned to(Pull request # 89) + - https://github.com/ossf/omega-triage-portal/pull/89 +- Pull request # 103 https://github.com/ossf/omega-triage-portal/pull/103 + - Fixed redis connection error + - Implemented the API endpoint for the triage portal upload functionality using GraphQL. + - UI notification implementation for status of uploading SARIF file when a file was successful or not. + - Added logic for the upload status when uploading files. +- Changed azure-core package version for compatibility purposes when doing the build, added description to a field in the schema, fixed formatting of other files (Pull request # 107) + - https://github.com/ossf/omega-triage-portal/pull/107 ***Security Requirements*** @@ -87,5 +98,6 @@ Establish functionality that will support the upload of a single SARIF file via - Password management and policy. - Apply appropriate security measures to protect sensitive data transmitted via the API. - Validate input received by the API to prevent potential attacks. - +- When the portal implements personas a permissions decorator should be added to the mutation of uploading a file, so that only users with certain permissions can make the upload of the file to the portal. + - https://django-graphql-jwt.domake.io/decorators.html#permission-required