cesnimda
23 lines
1.3 KiB
Markdown
23 lines
1.3 KiB
Markdown
# Jobjakt Security Release Gate — TEMPLATE
|
|
|
|
- Release commit / staging image digest:
|
|
- Reviewer / assessment date:
|
|
- Scope: exact repos, services, staging targets and accounts:
|
|
- Staging isolation verified: YES / NO (evidence)
|
|
- Test suites and scan outputs: tool, version, last execution, pass/fail/blocked:
|
|
- Authentication and MFA negative paths: PASS / FAIL / UNTESTED
|
|
- Cross-tenant and object-level isolation: PASS / FAIL / UNTESTED
|
|
- Upload, document parsing and PDF/export isolation: PASS / FAIL / UNTESTED
|
|
- AI prompt injection and service boundary: PASS / FAIL / UNTESTED
|
|
- Nginx/Docker/DB and credential exposure: PASS / FAIL / UNTESTED
|
|
- Backup restoration (synthetic staging): PASS / FAIL / UNTESTED
|
|
- CI/CD and SBOM/security checks: PASS / FAIL / UNTESTED
|
|
- Active exposed secrets pending revocation: YES / NO / UNKNOWN
|
|
- Known unmitigated critical/high exploitable issues: YES / NO / UNKNOWN
|
|
- Human acceptance tests, OAuth provider and mobile devices still unverified:
|
|
- Explicit accepted risks and sign-offs:
|
|
- Rollback and incident contacts verified: YES / NO
|
|
|
|
## Proposed recommendation
|
|
GO / CONDITIONAL NO-GO / NO-GO. Justify. No actual production deploy or merge from this report. High/critical exploitable issues, data isolation breakages and active exposed secrets prevent a GO recommendation. No assessment guarantees absence of other bugs.
|