Fix broken NCC 2017 security audit link - #185
Conversation
Updates the dead NCC Group audit link (.trust domain) to the active report page on nccgroup.com and removes the workaround exclusion from lychee.toml. Signed-off-by: Labreo <74888611+Labreo@users.noreply.github.com>
JustinCappos
left a comment
JustinCappos
left a comment
There was a problem hiding this comment.
The link off of that page (to download the full report) doesn't seem to work, which is the main thing we actually want. I'd prefer a PR which moves the relevant content to our repo.
|
Noted.Will work and shift towards this.Will respond with my approach and get back to you soon. |
|
The download link on NCC's page seems to be broken internally. I’ve reached out to NCC to ask if they can restore the link or provide a copy of the report. I also tried checking the Wayback Machine, but the Internet Archive is currently down due to an outage. In the meantime, does anyone on the team happen to have a copy of the report in the project archives? It should be titled "The Update Framework (TUF) Security Assessment" (also listed as "Kolide – The Update Framework Security Assessment"). If someone has it and can drop it here, I’ll add it under static/audits/ and update the links right away. |
|
Managed to retrieve a copy of the file. Will add it and update this pr soon. |
Hosts the 2017 NCC Group security assessment report locally in static/audits/ and updates the audit link in content/en/docs/security/audits.md. Signed-off-by: Labreo <74888611+Labreo@users.noreply.github.com>
|
I was able to track down a copy of the original 2017 report (ncc-group-kolide-the-update-framework-security-assessment.pdf). |
JustinCappos
left a comment
JustinCappos
left a comment
There was a problem hiding this comment.
thank you for tracking this down and fixing it!
3 participants
The NCC 2017 security audit link on the Security audits page was pointing to the defunct
nccgroup.trustdomain and was failing DNS resolution.This PR updates the link to the active assessment page on
nccgroup.comand removes the workaround exclusion fromlychee.toml.