Standup Notes 2021 04 20

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Kushal, Mickael, Ro

Topics and Call-outs

Codecov debrief

• See: https://about.codecov.io/security-update/

• Impacted credentials are tightly scoped and have been rotated

• Checksum validation PR: https://github.com/freedomofpress/securedrop/pull/5907

• Next steps

  • Review and put in place checksum-based mitigation

  • Track issue to replace codecov w/ coverage

Planning a remote 2021 SecureDrop Summit

Next steps to cancel Xenial

https://github.com/freedomofpress/securedrop/issues/5725

Support Sync

• After traffic mtg today

Allie

Today:

• Reschedule meeting with Nina about UI changes, and demo/discuss: https://github.com/freedomofpress/securedrop-client/pull/1246
• Remove codecov integration from client draft PR (not needed since we just have a 100% coverage check): https://github.com/freedomofpress/securedrop-client/pull/1244
• Pick up where I left off on fixing flaky tests: https://github.com/freedomofpress/securedrop-client/pull/1243#issuecomment-821578464

Blockers or Asks:

• None

Conor

Yesterday:

• Codecov

Today:

• ^^

Blockers or Asks: None

Erik

Yesterday: (Monday)

• Codecov fun
• Tiny bit of support

Today:

• Hiring sync-up w/ Mickael
• Help w/ Redmine migration off Ubuntu 16.04
• Back to technical work as time allows

Blockers or Asks: None

John

Yesterday:

Today:

• Clarifying test plan on #5863 (thanks Kushal!)
• Meetings, preparing for meetings

Blockers or Asks:

• Question on infra #3297

  • Out of scope

Kev

Yesterday:

Today:

Blockers or Asks:

Kushal

Today:

• ✅ Reviewed and merged https://github.com/freedomofpress/securedrop-debian-packaging/pull/243
• 🔲 Master ticket for removing Xenial https://github.com/freedomofpress/securedrop/issues/5725 Tomorrow:
• Start creating the initial PR for https://github.com/freedomofpress/securedrop/issues/5725 Blockers or Asks: None

Mickael

Yesterday:

Today:

• Catching up
• Back to review & sprint tasks; poking at Kev's codecov changes

Blockers or Asks: None

Ro

Yesterday:

• migration support/outreach

Today:

• icinga updates
• more migration support
• 2 instances migrating today
• see metrics/statistics overviews on our various platforms
• time to divide & conquer on the rest of the instances @ support sync today

Blockers or Asks: -Asks: check out the SecureDrop Onion Services adoption sheet (which is also one of the migration stats sheets), see if you have contacts at any of the last few orgs there for outreach

• ask: redmine migration--what is expected downtime?