The Omega Triage Portal is a web-application that can help manage automated vulnerability reports. It was designed for scale, (hundreds of thousands of projects, many millions of findings), but may also be useful at lower scale.
The Portal is in early development, and is not ready for general use.
Deployment of the Triage Portal in GitHub's development environment
This extension can be used from GitHub Codespaces:
Once loaded, open the .vscode/project.code-workspace file and then click the Open Workspace
button. A new widow will open. This is needed because VS Code launch settings are nested
within the omega/triage-portal folder.
You can then run the Django launch task to start the application. Navigate to http://localhost:0/admin and enter the default credentials (admin/admin), then navigate back to http://localhost:8001.
Make sure to have Docker installed and set up before running the following commands.
To build the application, run the following command:
docker-compose buildTo run the application, run the following command:
docker-compose upNOTE: The first time you run the application, you will need to run the following commands to create the database. This command MUST be run after the application is running with the above commands.
docker-compose run triage-portal python manage.py migratedocker-compose run triage-portal python manage.py createsuperuserIssues enabling python virtualenv
1. Open PowerShell
2. Run the following command: Set-ExecutionPolicy RemoteSigned -Scope CurrentUser OR Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope CurrentUser
The Proof of concept webapp is available at https://otpdev1.eastus.cloudapp.azure.com/admin
In the event of a virtual machine having to be destroy and a new one taken it's place, here are important details when deploying a new proof of concept using Azure VM
- In the Networking settings for the Azure VM, ensure that HTTP, HTTPS, and SSH are configured in the firewall.
- In the VM,
- Perform a git pull via HTTP git clone URI in the
/appdirectory - Install the following and any of their dependencies
- Update
/etc/nginx/nginx.confand/etc/nginx/sites-available/defaultfile with the respected settings - Collecting the static files for UI
- Ensure that the
/opt/omega/staticdirectory is available, if not, create it. - Enter the triage-portal container (
docker exec -it omega-triage-portal /bin/bash) and runpython manage.py collectstatic - Move the static files from container to the VM's
/opt/omega/staticdirectory (cp core/settings.py /opt/omega/static)
- Ensure that the
- Perform a git pull via HTTP git clone URI in the
TBD
See SECURITY.md.