adam/procurement-ingest
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/procurement-ingest.git synced 2026-10-07 16:08:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
procurement-ingest/lambdas/po
History
Adam Moussa 55a647537c
Require Secrets Manager key for Anthropic client 
Remove the silent fallback to a plaintext ANTHROPIC_API_KEY env var
in both email processors; require ANTHROPIC_API_KEY_SECRET_ARN and
raise if absent so a misconfigured deploy fails loudly instead of
using an unmanaged key.

Adapted from f175323 on security/sweep-2026-06-17. The From-header
sender-domain allowlist from that commit is intentionally dropped:
the From header is spoofable (INFRA-107, confirmed critical) and
sender authentication is being reworked in a separate PR.

Refs: INFRA-107
2026-07-15 19:29:41 -04:00
..
email_processor Require Secrets Manager key for Anthropic client 2026-07-15 19:29:41 -04:00
site_extractor Merge workorder-ingest into unified procurement repo (#22) 2026-05-12 15:21:06 -04:00
web_ui Merge workorder-ingest into unified procurement repo (#22) 2026-05-12 15:21:06 -04:00