harald
f0e5d6d26e
- Add SECURITY.md establishing Responsible Disclosure policy, SLA (48h/5d/90d), scope, and contact channels (security@pansi.eu) - Configure deny.toml for cargo-deny (advisories, bans, licenses, sources) - Audit with cargo audit (0 vulnerabilities) and cargo deny (all ok) - Scan entire git history with gitleaks (101 commits, no secrets leaked) - Baseline harmless unit-test mock tokens in .gitleaksignore - Document automated auditing in SECURITY_AUDIT.md and link in README.md
6 lines
351 B
Plaintext
6 lines
351 B
Plaintext
# Gitleaks ignore file
|
|
# Test mock constants in unit tests (confirmed non-sensitive test tokens)
|
|
2af14eef362e718a86bb079c4897f61719398c42:src/mount.rs:generic-api-key:976
|
|
1cdb30147b3c4ecb7f46db39f530a85113ad590d:tests/mount_security_test.rs:generic-api-key:90
|
|
436790abf0e904c1aaeef51fb10cb318ce9b8bdc:tests/upgrade_security_test.rs:generic-api-key:42
|