GitLab

Container has been officially approved

A Vendor is managing the containerization and updates to this product. All work is owned by the vendor with the exception of the approval process.

All work is owned by an external contributor, an external entity who is a partner with Platform One is managing the containerization and updates to this product. 

Final notification after 42 days of inactivity, the issue is being moved to Iron Bank Leadership to adjudicate why no work is happening.

An Automated label to notify of inactivity - applied after 28 days of no update to the issue

An Automated label to notify of inactivity - applied after 14 days of no update to the issue

Adding new functionality in a container, this is a feature request to turn on something in the application.

The owner of the container is working on the container/justifications, the work is in progress. 

Containers that have new findings based on continuous monitoring, that need to be addressed before being approved again. 

Initial hardening of container: This is the first time a container is going through the Iron Bank pipeline.

The container is going through an Official Review from the authorizing official and we are awaiting the final approval and or comments.

The container is going through Local Security Review prior to a Local Review for approval (we are aiming for an average of 3-5 business days) for this stage.

The container is going through Local Review prior to final submission for approval (we are aiming for an average of 3-5 business days) for this stage.

A Container is ready to go through the approval process and at this point the work is being handed off to the Iron Bank team to manage the approval.

An Access Request has been made to the container

All work is owned by members of the Container Hardening Team within Iron Bank

Issue was dropped because security findings could not be resolved or would not be accepted

Issues that are dropped for various reasons: no response, no longer needed, etc.

Issue was dropped due to lack of response from external contributor