gendesign/docs
Light1YT d030b04cf2
All checks were successful
CI / changes (push) Successful in 7s
CI / backend-tests (push) Has been skipped
CI / frontend-tests (push) Has been skipped
CI / openapi-codegen-check (push) Has been skipped
CI / changes (pull_request) Successful in 6s
CI / backend-tests (pull_request) Has been skipped
CI / frontend-tests (pull_request) Has been skipped
CI / openapi-codegen-check (pull_request) Has been skipped
docs(infra): secrets rotation policy + procedure (#78)
Compliance-doc: реестр классов секретов (CI/CD + prod runtime), процедуры ротации
per-class с downtime-эффектом, периодичность, quarterly audit-чеклист. OIDC verdict:
future (Forgejo 10.0.3 без Actions OIDC token provider; deploy = прямой SSH, не cloud
federation). Флагает sshkey.txt (PR #391) достижимый в git-истории — deploy-key
скомпрометирован, нужна ротация. Значения — в vault meta/00_credentials.md (не в репо).

Closes #78
2026-06-13 23:48:14 +05:00
..
runbooks fix(security): log_credentials + auth_audit.log → username из 401 (#436) 2026-05-23 09:59:50 +00:00
MVP_Goals_Python.md Initial commit: Discovery MVP docs (v2.1 + v2.2) 2026-04-25 08:40:09 +03:00
obsidian-livesync.md feat(deploy): split obsidian stack from main + path-filtered GHA 2026-05-11 09:51:31 +03:00
PILOT_ACCESS.md fix(ops): repair broken main-DB backup + harden auth scripts/docs (#71 #427 #429 #428) 2026-06-13 20:13:04 +05:00
Schema_Migrations_vs_Alembic.md feat(admin): freshness endpoint (#73) + README Forgejo refresh (#83) + migrations doc (#72) 2026-06-13 18:25:32 +00:00
Secrets_Rotation_Policy.md docs(infra): secrets rotation policy + procedure (#78) 2026-06-13 23:48:14 +05:00
Бизнес-план v2.1 - Site Finder + Roadmap 12 месяцев.md Initial commit: Discovery MVP docs (v2.1 + v2.2) 2026-04-25 08:40:09 +03:00