Harden CI and switch release builds to tagged immutable images
This commit is contained in:
parent
bed2e6cfb6
commit
f24e96efa7
60 changed files with 4710 additions and 64 deletions
8
SECURITY.md
Normal file
8
SECURITY.md
Normal file
|
|
@ -0,0 +1,8 @@
|
|||
# Security policy
|
||||
|
||||
Drive v2 is currently a private personal project and does not accept public vulnerability reports.
|
||||
|
||||
Security-sensitive behavior must follow the threat model in `docs/threat-model.md` and the architecture baseline. Never commit passwords, API tokens, TOTP secrets, OnlyOffice secrets, database credentials, private keys, or production configuration.
|
||||
|
||||
If the repository is made public, define a private reporting channel and supported-version policy before the first public release.
|
||||
|
||||
Loading…
Add table
Add a link
Reference in a new issue