Tech Spotlight

Tuesday 26 April 2022

At GovCMS, keeping your websites safe and secure is our top priority.

Our Operations team is always on top of any security threats that may attempt to penetrate our systems and is functioning 24/7 behind the scenes in the protection of your websites. Combined with this, Operations manage a plethora of day-to-day activities including the maintenance and development of the GovCMS distributions, release and deployments to the GovCMS platform, operational support, and compliance and security assurance activities.

Behind the scenes, there is a lot of effort in managing the GovCMS distributions and deploying these changes to your projects on the Platform. Since July last year the team has delivered 20 distribution releases, the majority of which have been for GovCMS D9.

This chart shows the GovCMS releases between July 2021 and March 2022 by distribution. 6 D7 releases, 4 D8 releases and 10 D9 releases.
This chart shows the GovCMS releases between July 2021 and March 2022 by distribution. 6 D7 releases, 4 D8 releases and 10 D9 releases.

These releases included many core and contrib module updates including Drupal security vulnerabilities for SA-CORE and SA-CONTRIB as well as 8 new modules.

New and updated modules between July 2021 and March 2022.
 

Core

New modules

Updated modules

D7

3

0

5

D8

3

0

4

D9

9

8

70

Total

15

8

79

The team undertakes a thorough assessment referred to as Technical, Threat and Risk Assessment, for each new module request that progresses to investigation. This is to ensure it meets all requirements both from a functional and security perspective. The findings from the Assessment are reviewed and submitted to the GovCMS Change Advisory Board which meets every Thursday, for final approval to be included in the distribution.

2022’s GovCMS Roadmap is sure shaping up to be even busier than 2021. The year ahead includes upgrades for Drupal 9.3 and 9.4 Core, PHP 8 and a new Drupal 10 distribution. As well as that we are looking at improving support for APIs.