Initial public release
GeoIntel release gates / Compile, test, contracts and builds (push) Successful in 1m49s
GeoIntel release gates / Python and npm vulnerability policy (push) Successful in 21s
GeoIntel release gates / Production AI image, SBOM and container scan (push) Successful in 5m39s
GeoIntel release gates / Deploy exact gated revision to Unraid (push) Failing after 58m43s
GeoIntel release gates / Compile, test, contracts and builds (push) Successful in 1m49s
GeoIntel release gates / Python and npm vulnerability policy (push) Successful in 21s
GeoIntel release gates / Production AI image, SBOM and container scan (push) Successful in 5m39s
GeoIntel release gates / Deploy exact gated revision to Unraid (push) Failing after 58m43s
This commit is contained in:
@@ -0,0 +1,14 @@
|
||||
# Security Checklist
|
||||
|
||||
## Verplicht
|
||||
- Geen secrets committen.
|
||||
- `.env.example` zonder echte keys.
|
||||
- Uploadvalidatie op extensie/MIME waar mogelijk.
|
||||
- Bestandspaden normaliseren; geen path traversal.
|
||||
- Geen stacktraces naar frontend.
|
||||
- CORS expliciet.
|
||||
- Maximale uploadgrootte.
|
||||
- Lange jobs via queue.
|
||||
|
||||
## Uploads V1
|
||||
Toegestaan: GeoTIFF/TIFF, GeoJSON/JSON, GPKG later, Shapefile alleen als gevalideerde zip later.
|
||||
Reference in New Issue
Block a user