#compliance - August 2023

complianceArchived
1 messages

Discuss topics related to compliance. See also #security.

August 2023
Sean
Seanabout 3 years ago
For keeping up with CVEs and Hotfixes, I’m curious if any one keeps separate “maintenance” environments for that fast development/testing.

For a simple example, lets say you have environments:
• dev
• test
• stage
• prod
But then you get a CVE which needs to be patched fast, but there are unstable/unapproved features in dev+test:
• so you can’t promote the current build up to stage/prod, even if it is patched
Instead you need another “maintenance” environment which holds the same version as stage+prod and you do any hotfix/CVE testing there.
In my case, I’d need 2 environment: “maintenance dev” and “maintenance test”