Skip to content

Stac-browser should only be built on version change (security improvement) #589

@anayeaye

Description

@anayeaye

What

We currently build the stac-browser using eoapi-cdk on every deployment regardless of changes the stac-browser version. This adds unnecessary build time and introduces more opportunities for vulnerable versions of dependencies to be installed (such as https://github.com/NASA-IMPACT/veda-architecture/issues/710#issuecomment-4184085464).

AC

  • Stac browser website is only built and deployed in CICD when the stac browser version environment variable is updated.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions