Skip to content

Commit

Permalink
Merge pull request #32 from osg-htc/master
Browse files Browse the repository at this point in the history
updating branch
  • Loading branch information
mtstanfield authored Aug 1, 2024
2 parents b98af7c + 38114d9 commit 3ecd7ae
Show file tree
Hide file tree
Showing 81 changed files with 3,585 additions and 128 deletions.
19 changes: 19 additions & 0 deletions .github/workflows/deploy-mkdocs.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
name: Deploy static MkDocs pages
on:
push:
branches: [ master ]

jobs:
deploy-mkdocs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
with:
fetch-depth: 0
- name: Deploy MkDocs pages
if: startsWith(github.repository, 'osg-htc/')
uses: docker://squidfunk/mkdocs-material:7.1.0
with:
args: >-
gh-deploy
--verbose
31 changes: 31 additions & 0 deletions .github/workflows/validate-mkdocs.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,31 @@
name: Valdate static MkDocs pages
on: pull_request

jobs:
validate-mkdocs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: Build MkDocs pages
uses: docker://squidfunk/mkdocs-material:7.1.0
timeout-minutes: 1
with:
args: >-
build
--verbose
--strict
- id: format-github-repo
run: echo "::set-output name=repo-name::${GITHUB_REPOSITORY#*\/}"

- name: Test links
timeout-minutes: 10
uses: docker://klakegg/html-proofer:3.16.0
with:
args: >-
--allow-hash-href
--check-html
--http-status-ignore 302
--file-ignore ./site/404.html
--url-ignore "https://fonts.gstatic.com,/github.com\/opensciencegrid\/${{ steps.format-github-repo.outputs.repo-name }}\/edit/,/opensciencegrid.org\/${{ steps.format-github-repo.outputs.repo-name }}/"
./site
24 changes: 0 additions & 24 deletions .travis.env

This file was deleted.

5 changes: 0 additions & 5 deletions .travis.yml

This file was deleted.

1 change: 0 additions & 1 deletion ci
Submodule ci deleted from e9a4b3
Binary file removed deploy-key.enc
Binary file not shown.
2 changes: 1 addition & 1 deletion docs/IncidentDiscoveryReporting.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ If you suspect a security problem, please **report it immediately**.

Also do NOT forget to report security incidents to your **local/home organization's** incident response team.

Please promptly report security incidents involving OSG resources via email to <security@opensciencegrid.org>.
Please promptly report security incidents involving OSG resources via email to <security@osg-htc.org>.
Please include the following information in your report:

- Your name, email address, phone number.
Expand Down
2 changes: 1 addition & 1 deletion docs/LetsEncryptOSGCAbundle.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,6 @@ As a part of the [Service Migration Plan](https://opensciencegrid.org/technology

Unlike the IGTF-Classic CAs, certificates from Let’s Encrypt will be recognized by your browser and OS by default.

Let’s Encrypt, however, does not confirm the organization that is running the host in the same manner as the IGTF-Classic CAs; we believe the additional IGTF checks are redundant with the registration and service discovery steps done on the OSG. OSG has separate registration procedures for services on the OSG that verifies the organizations; no access is given solely based on the possession of a host certificate. For more details please consult the OSG Information Security Officer's [position paper](https://opensciencegrid.org/security/OSGISOppLetsEncrypt.pdf) on the Let's Encrypt CA for Host Certificate Signing.
Let’s Encrypt, however, does not confirm the organization that is running the host in the same manner as the IGTF-Classic CAs; we believe the additional IGTF checks are redundant with the registration and service discovery steps done on the OSG. OSG has separate registration procedures for services on the OSG that verifies the organizations; no access is given solely based on the possession of a host certificate. For more details please consult the OSG Information Security Officer's [position paper](/OSGISOppLetsEncrypt.pdf) on the Let's Encrypt CA for Host Certificate Signing.

This is the upcoming change likely to be most relevant to security contacts during the migration. For more details on the migration plan please [consult the Service Migration Plan document](https://opensciencegrid.org/technology/policy/service-migrations-spring-2018/).
Loading

0 comments on commit 3ecd7ae

Please sign in to comment.