wehub-resource-sync
d48cda4081
CI / Test (ubuntu-latest, Node 18.x, bun) (push) Failing after 15m1s
CI / Test (ubuntu-latest, Node 18.x, npm) (push) Failing after 15m1s
CI / Test (ubuntu-latest, Node 18.x, pnpm) (push) Failing after 15m1s
CI / Test (ubuntu-latest, Node 18.x, yarn) (push) Failing after 15m1s
CI / Test (ubuntu-latest, Node 20.x, bun) (push) Failing after 17m13s
CI / Test (ubuntu-latest, Node 20.x, npm) (push) Failing after 18m42s
CI / Test (ubuntu-latest, Node 20.x, pnpm) (push) Failing after 15m0s
CI / Test (ubuntu-latest, Node 20.x, yarn) (push) Failing after 49m44s
CI / Test (ubuntu-latest, Node 22.x, bun) (push) Failing after 51m55s
CI / Test (ubuntu-latest, Node 22.x, pnpm) (push) Failing after 21m57s
CI / Test (ubuntu-latest, Node 22.x, npm) (push) Failing after 37m39s
CI / Test (ubuntu-latest, Node 22.x, yarn) (push) Failing after 34m7s
CI / Validate Components (push) Failing after 37m15s
CI / Python Tests (push) Failing after 10m1s
CI / Security Scan (push) Failing after 10m1s
CI / Lint (push) Failing after 17m12s
CI / Coverage (push) Failing after 20m19s
CI / Test (macos-latest, Node 18.x, bun) (push) Has been cancelled
CI / Test (macos-latest, Node 18.x, npm) (push) Has been cancelled
CI / Test (macos-latest, Node 18.x, pnpm) (push) Has been cancelled
CI / Test (macos-latest, Node 18.x, yarn) (push) Has been cancelled
CI / Test (windows-latest, Node 18.x, npm) (push) Has been cancelled
CI / Test (windows-latest, Node 18.x, pnpm) (push) Has been cancelled
CI / Test (windows-latest, Node 18.x, yarn) (push) Has been cancelled
CI / Test (macos-latest, Node 20.x, bun) (push) Has been cancelled
CI / Test (macos-latest, Node 20.x, npm) (push) Has been cancelled
CI / Test (macos-latest, Node 20.x, pnpm) (push) Has been cancelled
CI / Test (macos-latest, Node 20.x, yarn) (push) Has been cancelled
CI / Test (windows-latest, Node 20.x, npm) (push) Has been cancelled
CI / Test (windows-latest, Node 20.x, pnpm) (push) Has been cancelled
CI / Test (windows-latest, Node 20.x, yarn) (push) Has been cancelled
CI / Test (macos-latest, Node 22.x, bun) (push) Has been cancelled
CI / Test (macos-latest, Node 22.x, npm) (push) Has been cancelled
CI / Test (macos-latest, Node 22.x, pnpm) (push) Has been cancelled
CI / Test (macos-latest, Node 22.x, yarn) (push) Has been cancelled
CI / Test (windows-latest, Node 22.x, npm) (push) Has been cancelled
CI / Test (windows-latest, Node 22.x, pnpm) (push) Has been cancelled
CI / Test (windows-latest, Node 22.x, yarn) (push) Has been cancelled
30 lines
1.0 KiB
Markdown
30 lines
1.0 KiB
Markdown
# Diretrizes de Segurança
|
|
|
|
## Verificações de Segurança Obrigatórias
|
|
|
|
Antes de QUALQUER commit:
|
|
- [ ] Sem segredos hardcoded (chaves de API, senhas, tokens)
|
|
- [ ] Todas as entradas do usuário validadas
|
|
- [ ] Prevenção de injeção SQL (queries parametrizadas)
|
|
- [ ] Prevenção de XSS (HTML sanitizado)
|
|
- [ ] Proteção CSRF habilitada
|
|
- [ ] Autenticação/autorização verificada
|
|
- [ ] Rate limiting em todos os endpoints
|
|
- [ ] Mensagens de erro não vazam dados sensíveis
|
|
|
|
## Gerenciamento de Segredos
|
|
|
|
- NUNCA hardcode segredos no código-fonte
|
|
- SEMPRE use variáveis de ambiente ou um gerenciador de segredos
|
|
- Valide que os segredos necessários estão presentes na inicialização
|
|
- Rotacione quaisquer segredos que possam ter sido expostos
|
|
|
|
## Protocolo de Resposta a Segurança
|
|
|
|
Se um problema de segurança for encontrado:
|
|
1. PARE imediatamente
|
|
2. Use o agente **security-reviewer**
|
|
3. Corrija problemas CRÍTICOS antes de continuar
|
|
4. Rotacione quaisquer segredos expostos
|
|
5. Revise toda a base de código por problemas similares
|