Skip to content

Commit b2d5c66

Browse files
Update Break Glass procedure
1 parent 1cc0e7d commit b2d5c66

1 file changed

Lines changed: 10 additions & 0 deletions

File tree

security.md

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,3 +12,13 @@ Report security bugs in third-party modules to the person or team maintaining th
1212
## Learning More About Security
1313

1414
To learn more about securing your applications with Contrast, please see the [our docs](https://docs.contrastsecurity.com/?lang=en).
15+
16+
## "BREAK GLASS" In case of emergency
17+
18+
_Compromised library:_
19+
20+
In the event that a library that SmartFix uses is found to be compromised (like the LiteLLM hack):
21+
- Update requirements.txt, or the appropriate file, to list an uncompromised version of the library
22+
- Regenerate the requirements.lock file with `uv` and inspect to ensure it doesn't include a compromised version
23+
- Verify that the SmartFix workflow functions properly against one of our test applciations to fix a Contrast vulnerability
24+
- Release the updated version of SmartFix by following these instructions: https://contrast.atlassian.net/wiki/spaces/ARCH/pages/4215046180/SmartFix+Action+Releasing+notes

0 commit comments

Comments
 (0)