GitHub Actions
2dfe7ee241
feat: add additional security enhancements (Issue #365)
- Add constant-time token comparison utility (crypto/subtle)
- Add SBOM generation and attestation to CI/CD pipeline
- Document TLS enforcement, DNS security (DoH/DoT), and container hardening
- Create Security Incident Response Plan (SIRP)
- Add security update notification documentation
Security enhancements:
- Mitigates timing attacks on invite token validation
- Provides supply chain transparency with CycloneDX SBOM
- Documents production container hardening (read_only, cap_drop)
Closes #365
2025-12-21 19:00:29 +00:00
..
2025-12-21 18:56:23 +00:00
2025-12-21 04:57:31 +00:00
2025-12-12 19:21:44 +00:00
2025-12-12 19:21:44 +00:00
2025-12-21 04:57:31 +00:00
2025-12-21 19:00:29 +00:00
2025-12-11 18:26:24 +00:00
2025-12-11 18:26:24 +00:00
2025-12-11 18:26:24 +00:00
2025-12-15 06:26:52 +00:00