docs(security): add github target owner status ledger

This commit is contained in:
Your Name
2026-05-18 14:33:36 +08:00
parent 7be8868e5a
commit 91edf18552
31 changed files with 336 additions and 59 deletions

View File

@@ -157,7 +157,7 @@
"gate_state": "waiting_approved_scope",
"applies_after_decision": "approve_scope",
"minimum_required_evidence": [
"S4.10 owner response request packet / decision response 驗收結果docs/security/github-target-owner-decision-response.snapshot.json",
"S4.10 owner response request packet / template status ledger / decision response 驗收結果docs/security/github-target-owner-decision-response.snapshot.json",
"S4.12 workflow / secret 名稱 owner response 驗收結果docs/security/source-control-workflow-secret-name-owner-response.snapshot.json",
"repo owner / visibility / canonical decision",
"GitHub target 是否已存在的最新 probe",
@@ -170,7 +170,7 @@
"human-owner"
],
"preflight_checks": [
"確認 S4.10 request packet 或 response packet 未被當成 repo creation、visibility change、refs sync 或 primary approval",
"確認 S4.10 request packet、template status ledger 或 response packet 未被當成 repo creation、visibility change、refs sync 或 primary approval",
"確認 S4.12 response packet 未被當成 secret value collection、workflow modification、runner enablement 或 primary approval",
"確認 not_found_or_private 不被當成可自動建立 repo",
"確認 visibility change 仍未授權",