Record stable scan mitigation identity rule #10

Merged

gitchegumi merged 2 commits from kiyi/stable-scan-mitigations into main

2026-09-26 13:57:19 -05:00

kiyi commented

2026-09-25 23:39:29 -05:00

Member

Change

Record the owner's 2026-09-25 mitigation identity direction in the public delivery procedure: use stable CVE/GHSA or scanner rule/finding identifiers and affected component scope, with owner, controls, review reference and expiry. Unrelated pushes and line movement must not invalidate reviews. Keep artifact/source hashes in provenance and migrate callers and policy together.

The schema implementation is proposed in Homelab/workflows PR #62; the private platform migration is tracked in Homelab/platform issue 47 and platform PR 59. This note does not claim that a workflow release, image or live GitchAuth theme has been published/deployed.

Validation

npm run check passed (typecheck, links and deployment contract).
npm run build passed.
git diff --check passed; reviewed the public diff for secret values and private operational payloads.

## Change Record the owner's 2026-09-25 mitigation identity direction in the public delivery procedure: use stable CVE/GHSA or scanner rule/finding identifiers and affected component scope, with owner, controls, review reference and expiry. Unrelated pushes and line movement must not invalidate reviews. Keep artifact/source hashes in provenance and migrate callers and policy together. The schema implementation is proposed in [Homelab/workflows PR #62](https://git.gitchegumi.com/Homelab/workflows/pulls/62); the private platform migration is tracked in Homelab/platform issue 47 and platform PR 59. This note does not claim that a workflow release, image or live GitchAuth theme has been published/deployed. ## Validation - npm run check passed (typecheck, links and deployment contract). - npm run build passed. - git diff --check passed; reviewed the public diff for secret values and private operational payloads.

kiyi added 1 commit

2026-09-25 23:39:29 -05:00

Record stable scan mitigation identity rule

Documentation site checks / validate (pull_request) Successful in 1m6s

Details

Source security / security (pull_request) Successful in 2m32s

Details

Source security / pipeline (pull_request) Successful in 0s

Details

ff79271e8f