The following assets were in scope of the audit. Repository https://github.com/vitessio/vitess Language Go, Typescript The full Vitess repository was considered in scope, however the main focus of sources for the threat modelling: ● Vitessʼs documentation including README files from the Vitess repository ● Vitessʼs source code at https://github.com/vitessio/vitess ● Feedback from Vitess maintainers builds the fuzzers by cloning the upstream Vitess Github repository to get the latest Vitess source code and the CNCF-Fuzzing Github repository to get the latest set of fuzzers, and then builds the fuzzers

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Check out the vitessio/vitess repository . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Build the MariaDB version included with CentOS 7 (5.5) is not supported by Vitess. First install the MySQL 5.7 repository from Oracle: sudo yum localinstall -y https://dev.mysql.com/get/mysql57 -community -release -el7-9 as well. If you want to receive notifications even when you aren’t mentioned, you can go to the repository page and click Watch. Approving a Pull Request As a reviewer you can approve a pull request through

MariaDB version included with CentOS 7 (5.5) is not supported by Vitess. First install the MySQL 5.7 repository from Oracle: sudo yum localinstall -y https://dev.mysql.com/get/mysql57 -community -release -el7-9 as well. If you want to receive notifications even when you aren’t mentioned, you can go to the repository page and click Watch. Approving a Pull Request As a reviewer you can approve a pull request through This repository is called upstream. You develop and commit your changes in a clone of our upstream repository (shown as local in the image above). Then you push your changes to your forked repository (origin)

MariaDB version included with CentOS 7 (5.5) is not supported by Vitess. First install the MySQL 5.7 repository from Oracle: sudo yum localinstall -y https://dev.mysql.com/get/mysql57 -community -release -el7-9 as well. If you want to receive notifications even when you aren’t mentioned, you can go to the repository page and click Watch. Approving a Pull Request As a reviewer you can approve a pull request through This repository is called upstream. You develop and commit your changes in a clone of our upstream repository (shown as local in the image above). Then you push your changes to your forked repository (origin)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 Check out the vitessio/vitess repository . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 Build the MariaDB version included with CentOS 7 (5.5) is not supported by Vitess. First install the MySQL 5.7 repository from Oracle: sudo yum localinstall -y https://dev.mysql.com/get/mysql57 -community -release -el7-9 as well. If you want to receive notifications even when you aren’t mentioned, you can go to the repository page and click Watch. Approving a Pull Request As a reviewer you can approve a pull request through

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 Check out the vitessio/vitess repository . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 Build the MariaDB version included with CentOS 7 (5.5) is not supported by Vitess. First install the MySQL 5.7 repository from Oracle: sudo yum localinstall -y https://dev.mysql.com/get/mysql57 -community -release -el7-9 as well. If you want to receive notifications even when you aren’t mentioned, you can go to the repository page and click Watch. 36 Approving a Pull Request As a reviewer you can approve a pull request

implementation. The auditors managed to reach wide-spanning coverage of all aspects pertinent to the main repository of the Vitess software system. The most likely avenues for exploitation were chosen and verified gained about the Vitess scope system under scrutiny. Scope • Vitess ◦ The publicly available main repository at https://github.com/vitessio/vitess was used as the codebase to be verified. ▪ branch master auditing in Phase 1 and source-code assisted penetration testing in Phase 2. The main source code repository examined during the audit pertained to the Vitess itself, while the rather minimal sample client

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103 Check out the vitessio/vitess repository . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103 Build the MariaDB version included with CentOS 7 (5.5) is not supported by Vitess. First install the MySQL 5.7 repository from Oracle: sudo yum localinstall -y https://dev.mysql.com/get/mysql57 -community -release -el7-9 as well. If you want to receive notifications even when you aren’t mentioned, you can go to the repository page and click Watch. Approving a Pull Request As a reviewer you can approve a pull request through

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 Check out the vitessio/vitess repository . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 Build the MariaDB version included with CentOS 7 (5.5) is not supported by Vitess. First install the MySQL 5.7 repository from Oracle: sudo yum localinstall -y https://dev.mysql.com/get/mysql57 -community -release -el7-9 as well. If you want to receive notifications even when you aren’t mentioned, you can go to the repository page and click Watch. Approving a Pull Request As a reviewer you can approve a pull request through

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80 Check out the vitessio/vitess repository . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 Build the MariaDB version included with CentOS 7 (5.5) is not supported by Vitess. First install the MySQL 5.7 repository from Oracle: sudo yum localinstall -y https://dev.mysql.com/get/mysql57 -community -release -el7-9 as well. If you want to receive notifications even when you aren’t mentioned, you can go to the repository page and click Watch. Approving a Pull Request As a reviewer you can approve a pull request through