|
All checks were successful
CI / changes (push) Successful in 7s
CI / backend-tests (push) Has been skipped
CI / frontend-tests (push) Has been skipped
CI / openapi-codegen-check (push) Has been skipped
CI / changes (pull_request) Successful in 6s
CI / backend-tests (pull_request) Has been skipped
CI / frontend-tests (pull_request) Has been skipped
CI / openapi-codegen-check (pull_request) Has been skipped
Compliance-doc: реестр классов секретов (CI/CD + prod runtime), процедуры ротации per-class с downtime-эффектом, периодичность, quarterly audit-чеклист. OIDC verdict: future (Forgejo 10.0.3 без Actions OIDC token provider; deploy = прямой SSH, не cloud federation). Флагает sshkey.txt (PR #391) достижимый в git-истории — deploy-key скомпрометирован, нужна ротация. Значения — в vault meta/00_credentials.md (не в репо). Closes #78 |
||
|---|---|---|
| .. | ||
| runbooks | ||
| MVP_Goals_Python.md | ||
| obsidian-livesync.md | ||
| PILOT_ACCESS.md | ||
| Schema_Migrations_vs_Alembic.md | ||
| Secrets_Rotation_Policy.md | ||
| Бизнес-план v2.1 - Site Finder + Roadmap 12 месяцев.md | ||