Component: SecureDrop release & package build
Defined in model.py:322
Reproducible build & signing of released .deb packages.
Threats Affecting This Component
| Threat | Status | Risk | After mitigations | Mitigations |
|---|---|---|---|---|
| Compromise package build servers THREAT51 | mitigated | 6 medium | 6 medium | All SecureDrop and tor releases (Release file and tag) signed with airgapped key |
| Compromise wheel/package build machines THREATQW34 | mitigated | 6 medium | 6 medium | |
| Malicious code introduced in SecureDrop release THREAT29 | mitigated | 6 medium | 3 low | All SecureDrop and tor releases (Release file and tag) signed with airgapped key; Airgapped signing for release tags, public and controlled branches for development/release; 2FA required for SD maintainer GitHub accounts; All code is reviewed prior to merge; SecureDrop code is open source |