← SwissSign AG cases
Bugzilla #1990282
Audit Finding
Self Reported Incident
SwissSign: recommendation on linting software updates
RESOLVED
FIXED
SwissSign AG
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves SwissSign AG's proactive disclosure of a recommendation from an audit report regarding their process for updating linting software. The audit highlighted the need for SwissSign to ensure that updates to linting software are completed within three months of a release. Although the recommendation does not indicate a compliance failure, it reflects a suggested improvement to their operational practices. SwissSign has since implemented a monitoring process for linter updates and established a follow-up procedure with their PKI vendor. The case is now resolved with all action items completed and integrated into ongoing operations.
Chronology
- Audit report containing a recommendation published
- Monitoring process for linter updates established
Thread Activity
- SwissSign AG — Preliminary incident report filed detailing the audit recommendation.
- SwissSign AG — Full incident report submitted with details on the recommendation and impact assessment.
- SwissSign AG — Update provided confirming completion of action items related to the audit recommendation.
Participants
SwissSign AG
Google representative
HARICA
Verbuecheln representative
CCADB representative
External References
Similar Local Cases
SwissSign: recommendation on CA-specific risk assessment
SwissSign: recommendation on review of key pair generation implementation
SwissSign: OCSP outage
SwissSign: Certificate Profile error for S/MIME MV
SwissSign: EV code in JurisdiktionStateOrProvinceName
SwissSign: recommendation on self-assessment tool
SwissSign: Missed revocation and opening Bugzilla
SwissSign: CRL/OCSP revocation time mismatch