wehub-resource-sync
d48cda4081
CI / Test (ubuntu-latest, Node 18.x, bun) (push) Failing after 15m1s
CI / Test (ubuntu-latest, Node 18.x, npm) (push) Failing after 15m1s
CI / Test (ubuntu-latest, Node 18.x, pnpm) (push) Failing after 15m1s
CI / Test (ubuntu-latest, Node 18.x, yarn) (push) Failing after 15m1s
CI / Test (ubuntu-latest, Node 20.x, bun) (push) Failing after 17m13s
CI / Test (ubuntu-latest, Node 20.x, npm) (push) Failing after 18m42s
CI / Test (ubuntu-latest, Node 20.x, pnpm) (push) Failing after 15m0s
CI / Test (ubuntu-latest, Node 20.x, yarn) (push) Failing after 49m44s
CI / Test (ubuntu-latest, Node 22.x, bun) (push) Failing after 51m55s
CI / Test (ubuntu-latest, Node 22.x, pnpm) (push) Failing after 21m57s
CI / Test (ubuntu-latest, Node 22.x, npm) (push) Failing after 37m39s
CI / Test (ubuntu-latest, Node 22.x, yarn) (push) Failing after 34m7s
CI / Validate Components (push) Failing after 37m15s
CI / Python Tests (push) Failing after 10m1s
CI / Security Scan (push) Failing after 10m1s
CI / Lint (push) Failing after 17m12s
CI / Coverage (push) Failing after 20m19s
CI / Test (macos-latest, Node 18.x, bun) (push) Has been cancelled
CI / Test (macos-latest, Node 18.x, npm) (push) Has been cancelled
CI / Test (macos-latest, Node 18.x, pnpm) (push) Has been cancelled
CI / Test (macos-latest, Node 18.x, yarn) (push) Has been cancelled
CI / Test (windows-latest, Node 18.x, npm) (push) Has been cancelled
CI / Test (windows-latest, Node 18.x, pnpm) (push) Has been cancelled
CI / Test (windows-latest, Node 18.x, yarn) (push) Has been cancelled
CI / Test (macos-latest, Node 20.x, bun) (push) Has been cancelled
CI / Test (macos-latest, Node 20.x, npm) (push) Has been cancelled
CI / Test (macos-latest, Node 20.x, pnpm) (push) Has been cancelled
CI / Test (macos-latest, Node 20.x, yarn) (push) Has been cancelled
CI / Test (windows-latest, Node 20.x, npm) (push) Has been cancelled
CI / Test (windows-latest, Node 20.x, pnpm) (push) Has been cancelled
CI / Test (windows-latest, Node 20.x, yarn) (push) Has been cancelled
CI / Test (macos-latest, Node 22.x, bun) (push) Has been cancelled
CI / Test (macos-latest, Node 22.x, npm) (push) Has been cancelled
CI / Test (macos-latest, Node 22.x, pnpm) (push) Has been cancelled
CI / Test (macos-latest, Node 22.x, yarn) (push) Has been cancelled
CI / Test (windows-latest, Node 22.x, npm) (push) Has been cancelled
CI / Test (windows-latest, Node 22.x, pnpm) (push) Has been cancelled
CI / Test (windows-latest, Node 22.x, yarn) (push) Has been cancelled
30 lines
1.0 KiB
Markdown
30 lines
1.0 KiB
Markdown
# Directrices de Seguridad
|
|
|
|
## Verificaciones de Seguridad Obligatorias
|
|
|
|
Antes de CUALQUIER commit:
|
|
- [ ] Sin secretos hardcodeados (claves de API, contraseñas, tokens)
|
|
- [ ] Todas las entradas de usuario validadas
|
|
- [ ] Prevención de inyección SQL (consultas parametrizadas)
|
|
- [ ] Prevención de XSS (HTML sanitizado)
|
|
- [ ] Protección CSRF habilitada
|
|
- [ ] Autenticación/autorización verificada
|
|
- [ ] Rate limiting en todos los endpoints
|
|
- [ ] Los mensajes de error no filtran datos sensibles
|
|
|
|
## Gestión de Secretos
|
|
|
|
- NUNCA hardcodear secretos en el código fuente
|
|
- SIEMPRE usar variables de entorno o un gestor de secretos
|
|
- Validar que los secretos requeridos estén presentes al iniciar
|
|
- Rotar cualquier secreto que pueda haber sido expuesto
|
|
|
|
## Protocolo de Respuesta a Seguridad
|
|
|
|
Si se encuentra un problema de seguridad:
|
|
1. DETENER inmediatamente
|
|
2. Usar el agente **security-reviewer**
|
|
3. Corregir problemas CRÍTICOS antes de continuar
|
|
4. Rotar cualquier secreto expuesto
|
|
5. Revisar todo el código base en busca de problemas similares
|