wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

docs(security): add gitea owner response audit templates

Browse Source
This commit is contained in:
Your Name
2026-05-18 12:24:17 +08:00
parent d1c7ca66a3
commit 9f80b23db5
32 changed files with 283 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
docs/security/security-approval-queue.snapshot.json
View File

@@ -82,7 +82,7 @@
"risk": "MEDIUM",
"state": "pending_approval",
"recommended_awooop_mode": "approve_required",
"requested_decision": "是否先要求 owner 依 S4.9 owner response request packet / template status ledger / response 收件包完成 S4.7 coverage attestation，並在 scope decision 被接受後，批准使用 read-only token 或 redacted admin export 補齊 Gitea private/internal 全量 repo list。",
"requested_decision": "是否先要求 owner 依 S4.9 owner response request packet / template status ledger / audit event templates / response 收件包完成 S4.7 coverage attestation，並在 scope decision 被接受後，批准使用 read-only token 或 redacted admin export 補齊 Gitea private/internal 全量 repo list。",
"blocked_until_approved": true,
"required_reviewers": [
"migration-engineer",
@@ -101,7 +101,7 @@
"docs/security/GITEA-AUTHENTICATED-INVENTORY-IMPORT-ACCEPTANCE.md"
],
"allowed_after_approval": [
"先依 S4.9 request packet 要求 owner 回覆，用 template status ledger / collection checks 維持 request / received / accepted 分離，並完成 preflight / outcome lane 判定 / 驗收 S4.7 owner coverage attestation response，更新 migration matrix 與 decision table",
"先依 S4.9 request packet 要求 owner 回覆，用 template status ledger / audit event templates / collection checks 維持 request / received / accepted 分離，並完成 preflight / outcome lane 判定 / 驗收 S4.7 owner coverage attestation response，更新 migration matrix 與 decision table",
"使用 read-only token 或 redacted admin export 執行一次 inventory",
"只保存 token_present=true/false",
"更新 migration matrix 與 repo decision table"
@@ -111,7 +111,7 @@
"使用 write-capable token",
"未完成 S4.7 owner attestation 就標記 inventory complete",
"把 S4.7 owner attestation 當成 repo migration approval",
"把 S4.9 owner response request packet、template status ledger 或 response packet 當成 inventory 執行授權",
"把 S4.9 owner response request packet、template status ledger、audit event templates 或 response packet 當成 inventory 執行授權",
"建立 GitHub repo",
"sync refs",
"切 GitHub primary"