wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 3 Packages Projects Releases Wiki Activity

docs(security): add workflow secret audit templates

Browse Source
This commit is contained in:
Your Name
2026-05-19 00:57:38 +08:00
parent ad33b9dc06
commit f0a6e23a3c
34 changed files with 341 additions and 73 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
docs/security/security-approval-queue.snapshot.json
View File

@@ -126,7 +126,7 @@
"risk": "HIGH",
"state": "pending_approval",
"recommended_awooop_mode": "approve_required",
"requested_decision": "是否依 S4.10 request packet / template status ledger / audit event templates / redaction examples / collection checks / intake preflight checks 逐 repo 收到並驗收 GitHub target、owner、visibility、canonical response，並依 S4.12 request packet / template status ledger 驗收 workflow / secret 名稱 owner response；此 bundle 不授權執行。",
"requested_decision": "是否依 S4.10 request packet / template status ledger / audit event templates / redaction examples / collection checks / intake preflight checks 逐 repo 收到並驗收 GitHub target、owner、visibility、canonical response，並依 S4.12 request packet / template status ledger / audit event templates 驗收 workflow / secret 名稱 owner response；此 bundle 不授權執行。",
"blocked_until_approved": true,
"required_reviewers": [
"migration-engineer",
@@ -144,7 +144,7 @@
],
"allowed_after_approval": [
"依 S4.10 request packet / template status ledger / audit event templates / redaction examples / collection checks / intake preflight checks 驗收 owner decision response",
"依 S4.12 request packet / template status ledger 驗收 workflow / secret 名稱 owner response",
"依 S4.12 request packet / template status ledger / audit event templates 驗收 workflow / secret 名稱 owner response",
"逐 repo 更新 owner/visibility/canonical decision",
"更新 workflow / secret name parity read-only wording",
"產生 draft reconcile plan 或 ADR",
@@ -154,7 +154,7 @@
"建立 repo",
"修改 visibility",
"把 S4.10 request packet、template status ledger、audit event templates、redaction examples、collection checks、intake preflight checks 或 response packet 當成 repo creation 或 visibility approval",
"把 S4.12 request packet、template status ledger 或 response packet 當成 secret value collection、workflow modification 或 runner enablement approval",
"把 S4.12 request packet、template status ledger、audit event templates 或 response packet 當成 secret value collection、workflow modification 或 runner enablement approval",
"push refs",
"delete refs",
"切 GitHub primary"