akanealw
eec8c28fb3
Go Benchmark / Performance Regression Check (push) Has been cancelled
Cerberus Integration / Cerberus Security Stack Integration (push) Has been cancelled
Upload Coverage to Codecov / Backend Codecov Upload (push) Has been cancelled
Upload Coverage to Codecov / Frontend Codecov Upload (push) Has been cancelled
CodeQL - Analyze / CodeQL analysis (go) (push) Has been cancelled
CodeQL - Analyze / CodeQL analysis (javascript-typescript) (push) Has been cancelled
CrowdSec Integration / CrowdSec Bouncer Integration (push) Has been cancelled
Docker Build, Publish & Test / build-and-push (push) Has been cancelled
Quality Checks / Auth Route Protection Contract (push) Has been cancelled
Quality Checks / Codecov Trigger/Comment Parity Guard (push) Has been cancelled
Quality Checks / Backend (Go) (push) Has been cancelled
Quality Checks / Frontend (React) (push) Has been cancelled
Rate Limit integration / Rate Limiting Integration (push) Has been cancelled
Security Scan (PR) / Trivy Binary Scan (push) Has been cancelled
Supply Chain Verification (PR) / Verify Supply Chain (push) Has been cancelled
WAF integration / Coraza WAF Integration (push) Has been cancelled
Docker Build, Publish & Test / Security Scan PR Image (push) Has been cancelled
Repo Health Check / Repo health (push) Has been cancelled
History Rewrite Dry-Run / Dry-run preview for history rewrite (push) Has been cancelled
Prune Renovate Branches / prune (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
Nightly Build & Package / sync-development-to-nightly (push) Has been cancelled
Nightly Build & Package / Trigger Nightly Validation Workflows (push) Has been cancelled
Nightly Build & Package / build-and-push-nightly (push) Has been cancelled
Nightly Build & Package / test-nightly-image (push) Has been cancelled
Nightly Build & Package / verify-nightly-supply-chain (push) Has been cancelled
Update GeoLite2 Checksum / update-checksum (push) Has been cancelled
Container Registry Prune / prune-ghcr (push) Has been cancelled
Container Registry Prune / prune-dockerhub (push) Has been cancelled
Container Registry Prune / summarize (push) Has been cancelled
Supply Chain Verification / Verify SBOM (push) Has been cancelled
Supply Chain Verification / Verify Release Artifacts (push) Has been cancelled
Supply Chain Verification / Verify Docker Image Supply Chain (push) Has been cancelled
Monitor Caddy Major Release / check-caddy-major (push) Has been cancelled
Weekly Nightly to Main Promotion / Verify Nightly Branch Health (push) Has been cancelled
Weekly Nightly to Main Promotion / Create Promotion PR (push) Has been cancelled
Weekly Nightly to Main Promotion / Trigger Missing Required Checks (push) Has been cancelled
Weekly Nightly to Main Promotion / Notify on Failure (push) Has been cancelled
Weekly Nightly to Main Promotion / Workflow Summary (push) Has been cancelled
Weekly Security Rebuild / Security Rebuild & Scan (push) Has been cancelled
117 lines
3.0 KiB
YAML
Executable File
117 lines
3.0 KiB
YAML
Executable File
name: 🔐 Beta Security Feature
|
|
description: Create an issue for a Beta milestone security feature
|
|
title: "[BETA] [SECURITY] "
|
|
labels: ["beta", "feature", "security"]
|
|
body:
|
|
- type: markdown
|
|
attributes:
|
|
value: |
|
|
## Beta Security Feature
|
|
Advanced security features for the beta release.
|
|
|
|
- type: dropdown
|
|
id: priority
|
|
attributes:
|
|
label: Priority
|
|
description: How critical is this security feature?
|
|
options:
|
|
- Critical (Essential security control)
|
|
- High (Important protection)
|
|
- Medium (Additional hardening)
|
|
- Low (Nice-to-have security enhancement)
|
|
validations:
|
|
required: true
|
|
|
|
- type: dropdown
|
|
id: security_category
|
|
attributes:
|
|
label: Security Category
|
|
description: What type of security feature is this?
|
|
options:
|
|
- Authentication & Access Control
|
|
- Threat Protection
|
|
- SSL/TLS Management
|
|
- Monitoring & Logging
|
|
- Web Application Firewall
|
|
- Rate Limiting
|
|
- IP Access Control
|
|
validations:
|
|
required: true
|
|
|
|
- type: input
|
|
id: issue_number
|
|
attributes:
|
|
label: Planning Issue Number
|
|
description: Reference number from PROJECT_PLANNING.md (e.g., Issue #15)
|
|
placeholder: "Issue #"
|
|
validations:
|
|
required: false
|
|
|
|
- type: textarea
|
|
id: description
|
|
attributes:
|
|
label: Feature Description
|
|
description: What security capability should this provide?
|
|
placeholder: Describe the security feature and its purpose
|
|
validations:
|
|
required: true
|
|
|
|
- type: textarea
|
|
id: threat_model
|
|
attributes:
|
|
label: Threat Model
|
|
description: What threats does this feature mitigate?
|
|
placeholder: |
|
|
- Threat 1: Description and severity
|
|
- Threat 2: Description and severity
|
|
validations:
|
|
required: false
|
|
|
|
- type: textarea
|
|
id: tasks
|
|
attributes:
|
|
label: Implementation Tasks
|
|
description: List of tasks to complete this feature
|
|
placeholder: |
|
|
- [ ] Task 1
|
|
- [ ] Task 2
|
|
- [ ] Task 3
|
|
value: |
|
|
- [ ]
|
|
validations:
|
|
required: true
|
|
|
|
- type: textarea
|
|
id: acceptance
|
|
attributes:
|
|
label: Acceptance Criteria
|
|
description: How do we verify this security control works?
|
|
placeholder: |
|
|
- [ ] Security test 1
|
|
- [ ] Security test 2
|
|
value: |
|
|
- [ ]
|
|
validations:
|
|
required: true
|
|
|
|
- type: checkboxes
|
|
id: special_labels
|
|
attributes:
|
|
label: Special Categories
|
|
description: Select all that apply
|
|
options:
|
|
- label: SSO (Single Sign-On)
|
|
- label: WAF (Web Application Firewall)
|
|
- label: CrowdSec Integration
|
|
- label: Plus Feature (Premium)
|
|
- label: Requires Documentation
|
|
|
|
- type: textarea
|
|
id: security_testing
|
|
attributes:
|
|
label: Security Testing Plan
|
|
description: How will you test this security feature?
|
|
placeholder: Describe testing approach, tools, and scenarios
|
|
validations:
|
|
required: false
|