Re: Cyber Security questions (UNCLASSIFIED)

From: Konstantin Ryabitsev <konstantin@linuxfoundation.org>
Date: Jan 27, 2020, 19:40 UTC
Message-ID: <20200127194037.asum4555fjop5i2n@chatter.i7.local>
In-Reply-To: <3DDB5EB393DC7E4A810C3651CC0B08101780A52F@ugunhu4m.easf.csd.disa.mil>

Amy:

If you haven't received any responses, this is because git is open-source software without any single company or entity behind it -- so there is nobody in a position to provide authoritative answers that you are probably looking for.

There are vendors who repackage git as part of their commercial offering (e.g. Red Hat), so a better course of action for you may be to approach the companies who supply commercial support for git as part of the overall OS contract.

Best regards,

-- 
Konstantin Ryabitsev
Director, Core Projects IT
The Linux Foundation


On Wed, Jan 08, 2020 at 11:58:57PM +0000, Jones, Amy E CTR USARMY ATEC (USA) wrote:
> CLASSIFICATION: UNCLASSIFIED
> 
> We've had a request at this company to acquire GIT software, but all new software has to be approved by our cyber security team. I have a list of questions that need to be answered before we can start the approval process, and some of those questions are very technical, is there someone who could fill out the question form?
> 
> Amy Jones
> Team SURVICE
> 435-831-7168
> amy.e.jones49.ctr@mail.mil
> 
> 
> 
> CLASSIFICATION: UNCLASSIFIED