Another question related to Budibase, how do you harden the container and handle security issues? A Google search leads me to githubs standard security overview which is empty, Sync suggests there may be some advisories associated with the container?
Great question - the Snyk report there actually contains some outdated packages that are no longer used and maintained in the latest versions of Budibase.
But for the main @budibase/server, security is something that is paramount to us. As part of the delivery of our cloud platform and production deploy targets over the coming weeks, we are working with external security consultants who are providing a full security audit, pen testing and working with us on the implementation of a comprehensive security policy for our software. We will be sure to update the community and GitHub as this progresses.
We are currently working on a kubernetes/helm based setup for easier scaling that will be the preferred production deployment strategy for Budibase. This will be available over the coming weeks.
Comments
Budibase looks impressive thanks for sharing. How does scaling / load balancing work if I outgrow a single container?
Another question related to Budibase, how do you harden the container and handle security issues? A Google search leads me to githubs standard security overview which is empty, Sync suggests there may be some advisories associated with the container?
https://github.com/Budibase/budibase/security https://snyk.io/advisor/npm-package/@budibase/server?utm_med...
Great question - the Snyk report there actually contains some outdated packages that are no longer used and maintained in the latest versions of Budibase.
But for the main @budibase/server, security is something that is paramount to us. As part of the delivery of our cloud platform and production deploy targets over the coming weeks, we are working with external security consultants who are providing a full security audit, pen testing and working with us on the implementation of a comprehensive security policy for our software. We will be sure to update the community and GitHub as this progresses.
We are currently working on a kubernetes/helm based setup for easier scaling that will be the preferred production deployment strategy for Budibase. This will be available over the coming weeks.