 harald
|
f0e5d6d26e
|
sec: add SECURITY.md policy, deny.toml config, and document automated audit results
- Add SECURITY.md establishing Responsible Disclosure policy, SLA (48h/5d/90d), scope, and contact channels (security@pansi.eu)
- Configure deny.toml for cargo-deny (advisories, bans, licenses, sources)
- Audit with cargo audit (0 vulnerabilities) and cargo deny (all ok)
- Scan entire git history with gitleaks (101 commits, no secrets leaked)
- Baseline harmless unit-test mock tokens in .gitleaksignore
- Document automated auditing in SECURITY_AUDIT.md and link in README.md
|
2026-09-21 09:15:20 +02:00 |
|