Qlik Garden Security

[mgranillo]

 Are extensions uploaded to the garden checked for malicious code? Could downloading an extension from the garden pose a security risk? 

[Sonja_Bauernfeind]

Hello @mgranillo - I'll try and find out for you (unless someone else gets to the answer first 🙂 ).

[Aiham_Azmeh]

Hi @mgranillo ,

Only extensions from the TED program (https://developer.qlik.com/ted) are scanned for malicious code .

[Jeffrey_Goldberg]

Hi @mgranillo ,

The garden is a repository of open source extensions for the Qlik platform. Extensions on the Garden DO NOT have to submit to a code scan to list.

Qlik has a program called TED, or Trusted Extension Developer, for partners to submit extensions for accreditation. These extensions DO go through a procedure which includes code scanning and API compliance.

TED extensions are viewable here: https://developer.qlik.com/ted

Cheers,

Jeff G