Skip to content

4372 - Disable Matomo ECS Services in DMZ - #1670

Merged
rapidray12 merged 1 commit into
developfrom
jb-crasm-4372
Oct 21, 2026
Merged

rapidray12 merged 1 commit into
developfrom
jb-crasm-4372

Conversation

@jayjaybunce

@jayjaybunce jayjaybunce commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

🗣 Description

💭 Motivation and context

A critical PHP vulnerability was discovered, the Matomo ECS tasks have a desired_count of 1 which keeps a container live in perpetuity. This PR effectively prevents further containers from being started automatically by the ECS service.

🧪 Testing

✅ Pre-approval checklist

  • This PR has an informative and human-readable title.
  • Changes are limited to a single goal - eschew scope creep!
  • All future TODOs are captured in issues, which are referenced in code comments.
  • All relevant type-of-change labels have been added.
  • I have read the CONTRIBUTING document.
  • These code changes follow cisagov code standards.
  • All relevant repo and/or project documentation has been updated to reflect the changes in this PR.
  • Tests have been added and/or modified to cover the changes in this PR.
  • AI was used for research and/or understanding purposes while creating this pull request.
  • AI was used to generate code in this PR (either fully or in part).
    • I attest that I understand the AI-generated code and its functionality.
    • I am comfortable answering questions about the implementation of the AI-generated code.
  • All new and existing tests pass.
  • Bump major, minor, patch, pre-release, and/or build versions as appropriate via the bump_version script if this repository is versioned and the changes in this PR warrant a version bump.
  • Create a pre-release (necessary if and only if the pre-release version was bumped).

✅ Pre-merge checklist

  • Revert dependencies to default branches.
  • Finalize version.

✅ Post-merge checklist

  • Create a release (necessary if and only if the version was bumped).

@rapidray12 rapidray12 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Simple removal of Matomo from tech stack

@schmelz21 schmelz21 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@rapidray12
rapidray12 merged commit cd332dc into develop Oct 21, 2026
16 of 17 checks passed
@rapidray12
rapidray12 deleted the jb-crasm-4372 branch October 21, 2026 16:16

This branch was successfully deployed

1 active and 1 inactive deployments
staging — a75d6cef Deployed Oct 21, 2026 by jayjaybunce via staging #1031
integration — a75d6cef Deployed Oct 21, 2026 by jayjaybunce via integration #1031
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants