Wordpress to GitHub pages migration

[hythloda]

Hello,

We have been thinking about migrating from WordPress for a while now and realized we should consult the tac and then this new vulnerability came out. This does NOT affect the OpenSSF website; however it shows that Wordpress is not the best place to house our security website as sometimes the "medium is the message," and we should be showing some best practices with our website.

We got a bid from LF IT of about 26k to migrate to GitHub Pages.

Thoughts or concerns?

[SecurityCRob]

Wordpress— I’d be on board with considering a migration if we had the budget to.

[steiza]

I don't feel equipped to answer the budget part of the question, but I'm definitely a fan of GitHub Pages over WordPress

[lehors]

How many pages are we talking about? I'm easily shocked by the price everything costs so maybe it's just me but isn't 26k a lot for this?...

[SecurityCRob]

Like my partners who have chimed in earlier, I agree with the idea behind the migration, but the migration costs seems to be a bit high in my experience/perspective. I personally wouldn’t prioritize this (based on the cost) over other things that may add more value. Cheers, CRob Director of Security Communications Intel Product Assurance and Security From: Amanda L Martin ***@***.***> Sent: Tuesday, October 10, 2023 3:34 PM To: ossf/tac ***@***.***> Cc: Subscribed ***@***.***> Subject: [ossf/tac] Wordpress to GitHub pages migration (Issue #210) Hello, We have been thinking about migrating from WordPress for a while now and realized we should consult the tac and then this new vulnerability<https://arstechnica.com/security/2023/10/thousands-of-wordpress-sites-have-been-hacked-through-tagdiv-plugin-vulnerability/?utm_source=newsletter&utm_medium=email&utm_campaign=newsletter_axioscodebook&stream=top> came out. This does NOT affect the OpenSSF website; however it shows that Wordpress is not the best place to house our security website as sometimes the "medium is the message," and we should be showing some best practices with our website. We got a bid from LF IT of about 26k to migrate to GitHub Pages. Thoughts or concerns? — Reply to this email directly, view it on GitHub<#210>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AQRFDLDC2OAP6SOE6MLRPSLX6WPLVAVCNFSM6AAAAAA523QUIGVHI2DSMVQWIX3LMV43ASLTON2WKOZRHEZTMMBXGY2TCNA>. You are receiving this because you are subscribed to this thread.Message ID: ***@***.******@***.***>>

[hythloda]

Thanks for the feedback! we are going to think on it some more