Files
geointel/docs/SECURITY_CHECKLIST.md
Jens faeb58ef6d
GeoIntel release gates / Compile, test, contracts and builds (push) Successful in 1m49s
GeoIntel release gates / Python and npm vulnerability policy (push) Successful in 21s
GeoIntel release gates / Production AI image, SBOM and container scan (push) Successful in 5m39s
GeoIntel release gates / Deploy exact gated revision to Unraid (push) Failing after 58m43s
Initial public release
2026-08-31 21:56:53 +02:00

412 B

Security Checklist

Verplicht

  • Geen secrets committen.
  • .env.example zonder echte keys.
  • Uploadvalidatie op extensie/MIME waar mogelijk.
  • Bestandspaden normaliseren; geen path traversal.
  • Geen stacktraces naar frontend.
  • CORS expliciet.
  • Maximale uploadgrootte.
  • Lange jobs via queue.

Uploads V1

Toegestaan: GeoTIFF/TIFF, GeoJSON/JSON, GPKG later, Shapefile alleen als gevalideerde zip later.