Skip to content

Add /// @sensitivity security classifications to vendored Prisma schemas #236

Description

@thpr

Follow-up to #233. The vendored packages bring two new Prisma schemas:

  • packages/monitoring-db/prisma/schema.prisma
  • packages/s-ingest-core/prisma/schema.prisma

checkin's pre-commit hook (.husky/pre-commitcheckin-app/scripts/security-generator.js) regenerates security classifications from schema and blocks commits when a model/field lacks its /// @sensitivity annotation. The vendored schemas were authored in Inventory and do not carry checkin's annotations.

#233 was committed with --no-verify to land the vendor drop; the hook failure there was the un-installed worktree, but these schemas will still need annotating once they are part of the build.

Work

  • Add the required /// @sensitivity annotations to every model/field in both vendored schemas, per checkin's classification scheme.
  • Run npx prisma generate in the relevant workspace(s) and stage the regenerated security output.
  • Confirm the pre-commit security gate passes for these schemas.

Best done as part of (or right after) the monorepo wire-up issue, once the schemas are actually generated under this repo.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions