Skip to content

fix(security): remove embedded credentials and runtime secret files - #46

Merged
Traky12 merged 60 commits into
mainfrom
fix/security-hardcoded-secrets-2026-10-06
Oct 7, 2026
Merged

Traky12 merged 60 commits into
mainfrom
fix/security-hardcoded-secrets-2026-10-06

Conversation

@Traky12

@Traky12 Traky12 commented Oct 6, 2026

Copy link
Copy Markdown
Owner

Security hardening for the current Repository Safety Baseline findings and credential exposure. Removes the tracked MQTT password hash store, moves MQTT credential generation to runtime, removes hard-coded Wi-Fi/admin/database defaults, and requires explicit runtime secrets in deployment scripts/compose. Test-only credential samples are generated dynamically. No scanner exclusions are added.

Copilot AI balanced review requested due to automatic review settings October 6, 2026 20:47

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🚦 48h Operativity: NO-GO

  • TRL9 Gate: NO-GO
  • Workflow result: success
  • Report file: artifacts/operativity/trl9/connection-48h-check-20261006-204722.md
  • Gate source: artifacts/operativity/trl9/go-nogo-status.md

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🔒 Docker Security Audit

Status: success

Resumen Rápido

  • Auditoría Docker: success
  • Validación docker-compose: success
  • Tags fijos (no latest): ⚠️

Acciones si hay problemas

  • Ejecutar: make docker-harden
  • Verificar: make docker-verify-hardening
  • Re-auditar: make docker-audit --strict

Ver reporte completo en artefactos

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🤖 Análisis Automático IA

Claude — Revisión de código

Sin análisis disponible (SABIONDA_API_KEY no configurada)

Mistral — Documentación generada

Sin documentación disponible

Generado automáticamente por SABIONDA · GaiaChain trazabilidad activa

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🚨 Fallo en workflow

Copilot AI balanced review requested due to automatic review settings October 6, 2026 20:47

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🚦 48h Operativity: NO-GO

  • TRL9 Gate: NO-GO
  • Workflow result: success
  • Report file: artifacts/operativity/trl9/connection-48h-check-20261006-204803.md
  • Gate source: artifacts/operativity/trl9/go-nogo-status.md

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🔒 Docker Security Audit

Status: success

Resumen Rápido

  • Auditoría Docker: success
  • Validación docker-compose: success
  • Tags fijos (no latest): ⚠️

Acciones si hay problemas

  • Ejecutar: make docker-harden
  • Verificar: make docker-verify-hardening
  • Re-auditar: make docker-audit --strict

Ver reporte completo en artefactos

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🚨 Fallo en workflow

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🔍 Resumen de checks del PR #46

Workflow: E2E - Pull Request to Main
Conclusión: cancelled
Run: https://github.com/Traky12/Cast-o/actions/runs/37529079897

  • ✅ Pasados: 21
  • ❌ Fallidos: 3
  • ⏭️ Omitidos/Neutral: 8

Detalle de checks

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🤖 Análisis Automático IA

Claude — Revisión de código

Sin análisis disponible (SABIONDA_API_KEY no configurada)

Mistral — Documentación generada

Sin documentación disponible

Generado automáticamente por SABIONDA · GaiaChain trazabilidad activa

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🚨 Fallo en workflow

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🤖 Análisis Automático IA

Claude — Revisión de código

Sin análisis disponible (SABIONDA_API_KEY no configurada)

Mistral — Documentación generada

Sin documentación disponible

Generado automáticamente por SABIONDA · GaiaChain trazabilidad activa

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🔍 Resumen de checks del PR #46

Workflow: Validate All
Conclusión: cancelled
Run: https://github.com/Traky12/Cast-o/actions/runs/37531466256

  • ✅ Pasados: 7
  • ❌ Fallidos: 2
  • ⏭️ Omitidos/Neutral: 3

Detalle de checks

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🚨 Fallo en workflow

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🚨 Fallo en workflow

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🔍 Resumen de checks del PR #46

Workflow: E2E - Pull Request to Main
Conclusión: success
Run: https://github.com/Traky12/Cast-o/actions/runs/37531476844

  • ✅ Pasados: 29
  • ❌ Fallidos: 1
  • ⏭️ Omitidos/Neutral: 7

Detalle de checks

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🚨 Fallo en workflow

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🔍 Resumen de checks del PR #46

Workflow: Validate All
Conclusión: failure
Run: https://github.com/Traky12/Cast-o/actions/runs/37531476730

  • ✅ Pasados: 31
  • ❌ Fallidos: 2
  • ⏭️ Omitidos/Neutral: 7

Detalle de checks

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🚨 Fallo en workflow

Copilot AI balanced review requested due to automatic review settings October 6, 2026 21:13

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🔒 Docker Security Audit

Status: success

Resumen Rápido

  • Auditoría Docker: success
  • Validación docker-compose: success
  • Tags fijos (no latest): ⚠️

Acciones si hay problemas

  • Ejecutar: make docker-harden
  • Verificar: make docker-verify-hardening
  • Re-auditar: make docker-audit --strict

Ver reporte completo en artefactos

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🤖 Análisis Automático IA

Claude — Revisión de código

Sin análisis disponible (SABIONDA_API_KEY no configurada)

Mistral — Documentación generada

Sin documentación disponible

Generado automáticamente por SABIONDA · GaiaChain trazabilidad activa

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🚦 48h Operativity: NO-GO

  • TRL9 Gate: NO-GO
  • Workflow result: success
  • Report file: artifacts/operativity/trl9/connection-48h-check-20261006-211407.md
  • Gate source: artifacts/operativity/trl9/go-nogo-status.md

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🚨 Fallo en workflow

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🔍 Resumen de checks del PR #46

Workflow: Validate All
Conclusión: cancelled
Run: https://github.com/Traky12/Cast-o/actions/runs/37531476730

  • ✅ Pasados: 31
  • ❌ Fallidos: 1
  • ⏭️ Omitidos/Neutral: 7

Detalle de checks

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🔍 Resumen de checks del PR #46

Workflow: E2E - Pull Request to Main
Conclusión: success
Run: https://github.com/Traky12/Cast-o/actions/runs/37532367006

  • ✅ Pasados: 29
  • ❌ Fallidos: 0
  • ⏭️ Omitidos/Neutral: 6

Detalle de checks

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🔍 Resumen de checks del PR #46

Workflow: Validate All
Conclusión: success
Run: https://github.com/Traky12/Cast-o/actions/runs/37532367049

  • ✅ Pasados: 32
  • ❌ Fallidos: 0
  • ⏭️ Omitidos/Neutral: 8

Detalle de checks

Copilot AI balanced review requested due to automatic review settings October 6, 2026 22:04

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🚦 48h Operativity: NO-GO

  • TRL9 Gate: NO-GO
  • Workflow result: success
  • Report file: artifacts/operativity/trl9/connection-48h-check-20261006-220501.md
  • Gate source: artifacts/operativity/trl9/go-nogo-status.md

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🔒 Docker Security Audit

Status: success

Resumen Rápido

  • Auditoría Docker: success
  • Validación docker-compose: success
  • Tags fijos (no latest): ⚠️

Acciones si hay problemas

  • Ejecutar: make docker-harden
  • Verificar: make docker-verify-hardening
  • Re-auditar: make docker-audit --strict

Ver reporte completo en artefactos

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🤖 Análisis Automático IA

Claude — Revisión de código

Sin análisis disponible (SABIONDA_API_KEY no configurada)

Mistral — Documentación generada

Sin documentación disponible

Generado automáticamente por SABIONDA · GaiaChain trazabilidad activa

@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🔍 Resumen de checks del PR #46

Workflow: E2E - Pull Request to Main
Conclusión: success
Run: https://github.com/Traky12/Cast-o/actions/runs/37538270811

  • ✅ Pasados: 31
  • ❌ Fallidos: 0
  • ⏭️ Omitidos/Neutral: 6

Detalle de checks

@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

🔍 Resumen de checks del PR #46

Workflow: Validate All
Conclusión: success
Run: https://github.com/Traky12/Cast-o/actions/runs/37538270904

  • ✅ Pasados: 33
  • ❌ Fallidos: 0
  • ⏭️ Omitidos/Neutral: 7

Detalle de checks

@Traky12
Traky12 merged commit ca78748 into main Oct 7, 2026
40 checks passed

This branch was successfully deployed

1 active deployment
staging — 8132cc42 Deployed Oct 6, 2026 by Traky12 via deploy-staging #106
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants