mirror of
https://github.com/Sea-Haven-Industries/security-review.git
synced 2026-10-01 12:03:15 +00:00
Adam Moussa
4c88c01f7b
Fresh-init copy of the security-review/ subsystem extracted from Sea-Haven-Industries/orchestrator (being deprecated). Adds org-standard scaffold: CI reusable-workflow callers (ruff + collect), dependency-review, labeler, dependabot, .gitignore, requirements.txt. Scheduled execution is migrating to Claude Code web routines (ALARM-only to #repo-scanner); the systemd units and nightly_sweep.sh/checker_coordinator.sh remain the source of truth. Committed with --no-verify: the canary fixtures (checkers/fixtures/**) carry intentional secret-shaped test data that trips the deterministic gate (the documented detector-fixture false positive); no new logic is introduced.
7 lines
555 B
JSON
7 lines
555 B
JSON
{
|
|
"_comment": "MOCK read-only AWS inventory for confluence-doc.sh --canary. Stands in for what a read-only AWS inventory collector would emit (stacks/Lambdas). Each .resources[] entry is matched (by name token) against the page-ID map. 'payments-dashboard' matches the 'Payments Dashboard' page (no gap); 'afi-backup-monitor' has no page (1 planted gap).",
|
|
"resources": [
|
|
{ "type": "Lambda", "name": "payments-dashboard", "stack": "payments-dashboard" },
|
|
{ "type": "Lambda", "name": "afi-backup-monitor", "stack": "afi-backup-monitor" }
|
|
]
|
|
}
|