topic Qlik Garden Security in Integration, Extension & APIs

Qlik Garden Security

mgranillo — Wed, 23 Sep 2020 11:59:02 GMT

Are extensions uploaded to the garden checked for malicious code? Could downloading an extension from the garden pose a security risk?

Re: Qlik Garden Security

Sonja_Bauernfeind — Thu, 24 Sep 2020 11:27:40 GMT

Hello @mgranillo - I'll try and find out for you (unless someone else gets to the answer first 🙂 ).

Re: Qlik Garden Security

Aiham_Azmeh — Thu, 24 Sep 2020 11:31:12 GMT

Hi @mgranillo ,

Only extensions from the TED program (https://developer.qlik.com/ted) are scanned for malicious code .

Re: Qlik Garden Security

Jeffrey_Goldberg — Thu, 24 Sep 2020 11:34:07 GMT

Hi @mgranillo ,

The garden is a repository of open source extensions for the Qlik platform. Extensions on the Garden DO NOT have to submit to a code scan to list.

Qlik has a program called TED, or Trusted Extension Developer, for partners to submit extensions for accreditation. These extensions DO go through a procedure which includes code scanning and API compliance.

TED extensions are viewable here: https://developer.qlik.com/ted

Cheers,

Jeff G