wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

docs(security): add ref truth collection checks

Browse Source
This commit is contained in:
Your Name
2026-05-18 20:19:00 +08:00
parent 7a6c8786b1
commit 9d7fdd7491
33 changed files with 221 additions and 65 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/security/SECURITY-FOLLOWUP-RUNTIME-GATE.md
View File

@@ -35,7 +35,7 @@
| Safe web crawl scope | MEDIUM | 只準備 TLS/header/basic crawl 的低噪音 scope |
| Gitea owner attestation + read-only inventory | MEDIUM | 先依 S4.9 驗收 S4.7 owner response，再準備 read-only token 或 redacted export inventory |
| GitHub target decision | HIGH | 只準備 S4.10 owner response request packet / template status ledger / audit event templates / redaction examples / collection checks / intake preflight checks / response、S4.12 workflow / secret 名稱 response 驗收、owner / visibility / canonical / workflow parity 決策 |
| Ref truth review | HIGH | 只準備 S4.11 request packet / template status ledger / audit event templates / redaction examples / owner response 驗收、refs truth / deprecated / release tag 人工判定 |
| Ref truth review | HIGH | 只準備 S4.11 request packet / template status ledger / audit event templates / redaction examples / collection checks / owner response 驗收、refs truth / deprecated / release tag 人工判定 |
| Credentialed scan exception | HIGH | 只準備人工 exception、credential lifecycle 與停用方式 |
| Kali full-upgrade / reboot | HIGH | 只準備維護窗口、snapshot、rollback 與 post-health |
| Kali `/execute` exception | CRITICAL | 預設 blocked，只準備 disable / allowlist / audit 設計 |