[FOLIO-2974] Create folio-security email mailbox to be used as a mail handler in Jira Created: 22/Jan/21  Updated: 23/Jun/22  Resolved: 23/Jun/22

Status: Closed
Project: FOLIO
Components: None
Affects versions: None
Fix versions: None

Type: Story Priority: P4
Reporter: Mike Gorrell Assignee: Unassigned
Resolution: Won't Do Votes: 0
Labels: security, security-reviewed
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original estimate: Not Specified

Sprint:
Development Team: FOLIO DevOps

 Description   

The FOLIO Security team wants to sweep emails to security@folio.org into the Security project in FOLIO's Jira. In order to do this we need to setup a Jira Mail Handler that can monitor/sync with a mailbox.

We'd like a new email account setup (generic gmail account for example) that is not tied to any organization's mail infrastructure - let's say folio-sec-messages@gmail.com. We'll then have that address added to the security@folio.org list (managed by EBSCO) so it gets all of the inbound emails, and we'll setup a Jira Mail Handler to pull in emails to create issues.

We want the account to be owned by FOLIO and its credentials secured in project repositories - perhaps AWS Secrets Manager or something similar.



 Comments   
Comment by Craig McNally [ 23/Jun/22 ]

At this point it doesn't seem like we really need this. If that changes in the future we can revisit.

Generated at Thu Feb 08 23:24:39 UTC 2024 using Jira 1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d.