docs(infra): secrets rotation policy (#78) #1324

Merged

bot-backend merged 1 commit from docs/secrets-rotation-policy-78 into main

2026-06-13 18:50:56 +00:00

Author	SHA1	Message	Date
Light1YT	d030b04cf2	docs(infra): secrets rotation policy + procedure (#78 ) All checks were successful CI / changes (push) Successful in 7s Details CI / backend-tests (push) Has been skipped Details CI / frontend-tests (push) Has been skipped Details CI / openapi-codegen-check (push) Has been skipped Details CI / changes (pull_request) Successful in 6s Details CI / backend-tests (pull_request) Has been skipped Details CI / frontend-tests (pull_request) Has been skipped Details CI / openapi-codegen-check (pull_request) Has been skipped Details Compliance-doc: реестр классов секретов (CI/CD + prod runtime), процедуры ротации per-class с downtime-эффектом, периодичность, quarterly audit-чеклист. OIDC verdict: future (Forgejo 10.0.3 без Actions OIDC token provider; deploy = прямой SSH, не cloud federation). Флагает sshkey.txt (PR #391) достижимый в git-истории — deploy-key скомпрометирован, нужна ротация. Значения — в vault meta/00_credentials.md (не в репо). Closes #78	2026-06-13 23:48:14 +05:00